[
https://issues.apache.org/jira/browse/HBASE-10226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13856440#comment-13856440
]
Andrew Purtell commented on HBASE-10226:
----------------------------------------
bq. So the authorize method was not getting called at all.
Not for namespace level grants, no.
> [AccessController] Namespace grants not always checked
> ------------------------------------------------------
>
> Key: HBASE-10226
> URL: https://issues.apache.org/jira/browse/HBASE-10226
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.98.0, 0.96.2, 0.99.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Priority: Critical
> Fix For: 0.98.0, 0.99.0
>
> Attachments: 10226-0.96.patch, 10226-0.96.patch, 10226-0.96.patch,
> 10226.patch, 10226.patch, 10226.patch
>
>
> Namespace grants for a user are supposed to supercede table level
> permissions, a middle tier between table grants and global grants. We are not
> always checking.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
