[
https://issues.apache.org/jira/browse/HBASE-22208?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16817204#comment-16817204
]
Guanghao Zhang commented on HBASE-22208:
----------------------------------------
For 004 patch, need add @Override for method in NoopAccessChecker and no need
to add methods' javadoc comment? But need one class's javadoc comment. And the
accessChecker may be null in AccessController?
> Create access checker and expose it in RS
> -----------------------------------------
>
> Key: HBASE-22208
> URL: https://issues.apache.org/jira/browse/HBASE-22208
> Project: HBase
> Issue Type: Sub-task
> Reporter: Yi Mei
> Assignee: Yi Mei
> Priority: Major
> Attachments: HBASE-22208.master.001.patch,
> HBASE-22208.master.002.patch, HBASE-22208.master.003.patch,
> HBASE-22208.master.004.patch
>
>
> In HBase access control service, access checker performs authorization checks
> for a given user's assigned permissions. The access checker holds a auth
> manager instance which cache all global, namespace and table permissions.
> A access checker is created when master, RS and region load AccessController,
> permission cache is refreshed when acl znode changed.
> We can create access checker when master and RS start and expose it in order
> to use procedure to refresh its cache rather than watch ZK.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
