[
https://issues.apache.org/jira/browse/HBASE-12301?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Matteo Bertozzi updated HBASE-12301:
------------------------------------
Attachment: HBASE-12301-v0.patch
the default "user_permission" with no argument was now going directly to the
get table permission instead of going to the global one. basically the first if
(tableRegex == null) will never be true.
Then there was another minor issue with the namespace handling, not checking
for the nil tableRegex.
the attached patch changes the behavior to what was before, showing only the
global permission when user_permission is invoked with no argument.
If you want the table permission you have to specify the regex as was described
in the user_permission help
{noformat}
hbase> user_permission
hbase> user_permission 'table1'
hbase> user_permission 'namespace1:table1'
hbase> user_permission '.*'
hbase> user_permission '^[A-C].*'
{noformat}
> user_permission command does not show global permissions
> --------------------------------------------------------
>
> Key: HBASE-12301
> URL: https://issues.apache.org/jira/browse/HBASE-12301
> Project: HBase
> Issue Type: Bug
> Components: security, shell
> Affects Versions: 0.98.4, 2.0.0
> Reporter: Jerry He
> Assignee: Matteo Bertozzi
> Attachments: HBASE-12301-v0.patch
>
>
> It seems that since 0,98 or later, the shell command does not show global
> permission anymore, even requested by user with the right privilege.
> {code}
> hbase(main):004:0> user_permission
> User Table,Family,Qualifier:Permission
> hbase default,table1,,: [Permission:
> actions=READ,WRITE,EXEC,CREATE,ADMIN]
> user2 default,table1,,: [Permission:
> actions=READ,WRITE]
> hbase default,table2,,: [Permission:
> actions=READ,WRITE,EXEC,CREATE,ADMIN]
> user2 default,table2,,: [Permission:
> actions=READ,WRITE]
> {code}
> I recall in the older versions, global permissions were shown as permissions
> on the hbase:acl table.
> Anyway we need a way to show the global permissions as part of
> user_permission request.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
