[
https://issues.apache.org/jira/browse/HBASE-14432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14744047#comment-14744047
]
Matteo Bertozzi commented on HBASE-14432:
-----------------------------------------
there are no changes to the ACL code in the patch to check the user...
also, the toStringClassDetails() of each class might be revisited now.
otherwise we have the two user= and owner= printing the same thing
> Procedure V2 - Procedure.owner field should be set to enforce ACL on admin
> tasks
> --------------------------------------------------------------------------------
>
> Key: HBASE-14432
> URL: https://issues.apache.org/jira/browse/HBASE-14432
> Project: HBase
> Issue Type: Sub-task
> Components: proc-v2
> Affects Versions: 2.0.0, 1.1.2, 1.3.0
> Reporter: Stephen Yuan Jiang
> Assignee: Stephen Yuan Jiang
> Labels: security
> Attachments: HBASE-14432.patch
>
>
> In the Procedure class, the owner field is never set. We need to set it so
> that we can enforce ACLs on admin tasks such as whether a user has privilege
> to abort a procedure.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
