[
https://issues.apache.org/jira/browse/HBASE-21602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16814316#comment-16814316
]
Yi Mei commented on HBASE-21602:
--------------------------------
[~stack] Thanks for your comments.
The doc can be commented now and I am still working on the doc.
/with acl region/with acl table/ ? This is confusing, I have modified the doc.
UpdateAclRemoteProcedure an RPC to the RS in order to update RS acl cache.
> Procedure v2 access control
> ---------------------------
>
> Key: HBASE-21602
> URL: https://issues.apache.org/jira/browse/HBASE-21602
> Project: HBase
> Issue Type: Task
> Reporter: Yi Mei
> Assignee: Yi Mei
> Priority: Major
>
> Now the access control service (grant and revoke) is done by regionserver
> with acl region. The process of grant/revoke is: client call grant,
> regionserver with acl region will check and then put permission row in acl
> table, and also write to the ZooKeeper acl node(/hbase/acl). Each
> regionserver watch acl znode and update local acl cache when node children
> changed.
> Create this issus to use procedure v2 framework and reduce zk depencency. Any
> suggestions are welcomed. Thanks.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
