[ 
https://issues.apache.org/jira/browse/HBASE-11043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13980555#comment-13980555
 ] 

Andrew Purtell commented on HBASE-11043:
----------------------------------------

Your specific concern seems to be about querying HBase with Hive. I would point 
to PHOENIX-946. Hive could offload HBase data source queries to Phoenix, which 
is running as a coprocessor and maintains its own schema-to-raw-table mapping 
behind a DDL facade that Hive could just use. 

> Users with table's read/write permission can't get table's description
> ----------------------------------------------------------------------
>
>                 Key: HBASE-11043
>                 URL: https://issues.apache.org/jira/browse/HBASE-11043
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 0.99.0
>            Reporter: Liu Shaohui
>            Priority: Minor
>         Attachments: HBASE-11043-trunk-v1.diff
>
>
> AccessController#preGetTableDescriptors only allow users with admin or create 
> permission to get table's description.
> {quote}
>         requirePermission("getTableDescriptors", nameAsBytes, null, null,
>           Permission.Action.ADMIN, Permission.Action.CREATE);
> {quote}
> I think Users with table's read/write permission should also be able to get 
> table's description. 
> Eg: when create a hive table on HBase,  hive will get the table description 
> to check if the mapping is right. Usually the hive users only have the read 
> permission of table.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to