[ 
https://issues.apache.org/jira/browse/HBASE-11077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13986173#comment-13986173
 ] 

Enis Soztutar commented on HBASE-11077:
---------------------------------------

bq. I will do that and add a patch here for the 0.98 version unless objection.
Sounds good. 
bq. If there isn't any take up of the per-operation strategy toggle, we could 
drop it in 0.99+ ?
It seems to me that the strategy should be a table level property (a part of 
the param this patch adds) or baked into the priviledge (like the 
READ_INVISIBLE) we were talking about.

Another argument for defaulting to a behavior for disallowing scans without 
read perm by default is that, we do not want a user to DOS the table by 
launching scanners against it although with no read permission. 

> [AccessController] Restore compatible early-out access denial
> -------------------------------------------------------------
>
>                 Key: HBASE-11077
>                 URL: https://issues.apache.org/jira/browse/HBASE-11077
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Andrew Purtell
>            Assignee: Andrew Purtell
>            Priority: Critical
>             Fix For: 0.99.0, 0.98.2
>
>         Attachments: HBASE-11077.patch, HBASE-11077.patch, HBASE-11077.patch, 
> HBASE-11077.patch
>
>
> See parent for the whole story.
> For 0.98, to start, just put back the early out that was removed in 0.98.0 
> and allow it to be overridden with a table attribute. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to