[
https://issues.apache.org/jira/browse/HBASE-21602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16802895#comment-16802895
]
stack commented on HBASE-21602:
-------------------------------
[~Yi Mei] Doc. looks great. Mind making it so we can comment on the doc? At the
moment it is view only. Thanks.
Here's a few comments in meantime.
Its good to reference this JIRA in your design doc in case folks get to it via
another route.
You might refer to the original JIRA that added the original access control too.
s/with acl region/with acl table/ ?
Is UpdateAclRemoteProcedure an RPC to the RS?
Design looks very nice. Thanks.
> Procedure v2 access control
> ---------------------------
>
> Key: HBASE-21602
> URL: https://issues.apache.org/jira/browse/HBASE-21602
> Project: HBase
> Issue Type: Task
> Reporter: Yi Mei
> Assignee: Yi Mei
> Priority: Major
>
> Now the access control service (grant and revoke) is done by regionserver
> with acl region. The process of grant/revoke is: client call grant,
> regionserver with acl region will check and then put permission row in acl
> table, and also write to the ZooKeeper acl node(/hbase/acl). Each
> regionserver watch acl znode and update local acl cache when node children
> changed.
> Create this issus to use procedure v2 framework and reduce zk depencency. Any
> suggestions are welcomed. Thanks.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
