[ 
https://issues.apache.org/jira/browse/HBASE-19634?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16317782#comment-16317782
 ] 

Hudson commented on HBASE-19634:
--------------------------------

FAILURE: Integrated in Jenkins build HBase-Trunk_matrix #4367 (See 
[https://builds.apache.org/job/HBase-Trunk_matrix/4367/])
HBASE-19634 Add permission check for executeProcedures in (zhangduo: rev 
1a89793ee8ffa46d61014d62dc1c813c08f6acc9)
* (edit) 
hbase-server/src/main/java/org/apache/hadoop/hbase/coprocessor/RegionServerObserver.java
* (edit) 
hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/RegionServerCoprocessorHost.java
* (edit) 
hbase-server/src/test/java/org/apache/hadoop/hbase/TestJMXConnectorServer.java
* (edit) 
hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
* (edit) 
hbase-server/src/main/java/org/apache/hadoop/hbase/regionserver/RSRpcServices.java
* (edit) 
hbase-server/src/test/java/org/apache/hadoop/hbase/security/access/TestAccessController.java


> Add permission check for executeProcedures in AccessController
> --------------------------------------------------------------
>
>                 Key: HBASE-19634
>                 URL: https://issues.apache.org/jira/browse/HBASE-19634
>             Project: HBase
>          Issue Type: Sub-task
>          Components: proc-v2, Replication
>            Reporter: Duo Zhang
>            Assignee: Duo Zhang
>             Fix For: 3.0.0
>
>         Attachments: HBASE-19634-HBASE-19397-v1.patch, 
> HBASE-19634-HBASE-19397-v1.patch, HBASE-19634-HBASE-19397-v2.patch, 
> HBASE-19634-HBASE-19397.patch
>
>
> This is important, the actual refresh on RS is trigger by the 
> executeProcedure call and it will pass some information. These information 
> should not be fully trusted since anyone can all this method. We need to make 
> sure that the actual data/state for a replication peer is always loaded from 
> the replication storage, not from the parameter of the executeProcedure call.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to