[
https://issues.apache.org/jira/browse/HBASE-12622?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14233905#comment-14233905
]
Srikanth Srungarapu commented on HBASE-12622:
---------------------------------------------
My two cents.
Going by the discussion in HBASE-9206, specifically
bq. 'A' on the namespace does not grant admin privilege - let's document this
exception clearly.
my understanding is there isn't any support added for namespace admin, so
adding support for requireGlobalPermission(ns) is non-trivial/major change, as
it needs to be implemented from scratch. Maybe, we can move forward with the
global checks for now?
> user_permission should require global admin to display global and ns
> permissions
> --------------------------------------------------------------------------------
>
> Key: HBASE-12622
> URL: https://issues.apache.org/jira/browse/HBASE-12622
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 2.0.0, 0.98.8, 0.99.2
> Reporter: Matteo Bertozzi
> Assignee: Matteo Bertozzi
> Fix For: 1.0.0, 2.0.0, 0.98.9
>
> Attachments: HBASE-12622-v0.patch
>
>
> user_permission check the user permission only on the table level (requiring
> at least a table-level admin)
> global and namespace permission listing is done without checking anything.
> but only a global admins should be able to perform this operations.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
