[
https://issues.apache.org/jira/browse/HBASE-12098?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14150825#comment-14150825
]
Andrew Purtell commented on HBASE-12098:
----------------------------------------
This is a bug fix I think. We don't need to flag it or document it as an
incompatible change. Should have always worked this way. We also had an issue
earlier where group permissions should have been checked on namespaces and were
not. Same class of problem.
+1
> User granted namespace table create permissions can't create a table
> --------------------------------------------------------------------
>
> Key: HBASE-12098
> URL: https://issues.apache.org/jira/browse/HBASE-12098
> Project: HBase
> Issue Type: Bug
> Components: Client, security
> Affects Versions: 0.98.6
> Reporter: Dima Spivak
> Assignee: Srikanth Srungarapu
> Priority: Critical
> Fix For: 2.0.0, 0.98.7, 0.99.1
>
> Attachments: 12098-master.txt, HBASE-12098.patch,
> HBASE-12098_master_v2.patch
>
>
> From the HBase shell and Java API, I am seeing
> {code}ERROR: org.apache.hadoop.hbase.security.AccessDeniedException:
> Insufficient permissions for user 'dima' (global, action=CREATE){code}
> when I try to create a table in a namespace to which I have been granted
> RWXCA permissions by a global admin. Interestingly enough, this only seems to
> extend to table creation; the same user is then allowed to disable and drop a
> table created by a global admin in that namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
