[
https://issues.apache.org/jira/browse/HBASE-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14150344#comment-14150344
]
Anoop Sam John commented on HBASE-12098:
----------------------------------------
bq.should we consider add a flag
IMHO no as this is a bug fix. One would expect ns permission to work out for
creating tables in that ts. Max we can mark this jira as incompatible change
clearly say in release notes what is the compatibility break and why we do so.
> User granted namespace table create permissions can't create a table
> --------------------------------------------------------------------
>
> Key: HBASE-12098
> URL: https://issues.apache.org/jira/browse/HBASE-12098
> Project: HBase
> Issue Type: Bug
> Components: Client, security
> Affects Versions: 0.98.6
> Reporter: Dima Spivak
> Assignee: Srikanth Srungarapu
> Priority: Critical
> Fix For: 2.0.0, 0.98.7, 0.99.1
>
> Attachments: 12098-master.txt, HBASE-12098.patch,
> HBASE-12098_master_v2.patch
>
>
> From the HBase shell and Java API, I am seeing
> {code}ERROR: org.apache.hadoop.hbase.security.AccessDeniedException:
> Insufficient permissions for user 'dima' (global, action=CREATE){code}
> when I try to create a table in a namespace to which I have been granted
> RWXCA permissions by a global admin. Interestingly enough, this only seems to
> extend to table creation; the same user is then allowed to disable and drop a
> table created by a global admin in that namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
