Abhishek Kumar created HBASE-16311:
--------------------------------------

             Summary: Audit log for delete snapshot operation is missing in 
case of snapshot owner deleting the same
                 Key: HBASE-16311
                 URL: https://issues.apache.org/jira/browse/HBASE-16311
             Project: HBase
          Issue Type: Improvement
          Components: snapshots
            Reporter: Abhishek Kumar
            Priority: Minor


1. Audit log seems to be left as a TODO task in AccessController.java:
...................
@Override
  public void preDeleteSnapshot(final 
ObserverContext<MasterCoprocessorEnvironment> ctx,
      final SnapshotDescription snapshot) throws IOException {
    if (SnapshotDescriptionUtils.isSnapshotOwner(snapshot, getActiveUser())) {
      // Snapshot owner is allowed to delete the snapshot
      // TODO: We are not logging this for audit
    } else {
      requirePermission("deleteSnapshot", Action.ADMIN);
    }
  }
...................
2. Also, snapshot name is not getting logged in the audit logs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to