[ 
https://issues.apache.org/jira/browse/HBASE-10619?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14481059#comment-14481059
 ] 

Anoop Sam John commented on HBASE-10619:
----------------------------------------

Sorry for the delay in rework on the patch. I some how missed this completely.
As per the comment from Andy, added the super user check.  The super user can 
create table in system namespace as well as disable tables in namespace.  For 
non super users these are not allowed.
Please note that for disable table, there is an extra check for META table. 
Even for super user this op is not allowed. (This is what we were doing till 
now).  This is because for a disable op to complete, the META table should be 
available.  On disable request, we call the async op of DisableTableHandler.  
The calles checks for all regions of that table to be in disabled state in 
META. But for that META has to be up. Means we can not allow disable of META 
even for super users.

> Don't allow non super users to disable/drop system tables
> ---------------------------------------------------------
>
>                 Key: HBASE-10619
>                 URL: https://issues.apache.org/jira/browse/HBASE-10619
>             Project: HBase
>          Issue Type: Bug
>            Reporter: Anoop Sam John
>            Assignee: Anoop Sam John
>         Attachments: HBASE-10619.patch, HBASE-10619_V2.patch, 
> HBASE-10619_V3.patch, HBASE-10619_V4.patch
>
>
> We should treat NS table just like META table, which is having checks so that 
> user can not disable/drop.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to