[
https://issues.apache.org/jira/browse/HBASE-17884?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16818436#comment-16818436
]
Andrew Purtell commented on HBASE-17884:
----------------------------------------
Security and master procedure related unit tests pass with this change in place.
There are some expected API changes in AccessController, which is LP(Config).
The constructor of ObserverContext, which is LP(Coproc) is changed, but this
has no consequence for users of the coprocessor API which will not construct
these objects themselves. Changes to coprocessor APIs are generally avoided by
making the active User reference available in ObserverContext for use by the
AccessController. There are changes to the coprocessor host APIs, but those are
Private.
> Backport HBASE-16217 to branch-1
> --------------------------------
>
> Key: HBASE-17884
> URL: https://issues.apache.org/jira/browse/HBASE-17884
> Project: HBase
> Issue Type: Sub-task
> Components: Coprocessors, security
> Reporter: Gary Helmling
> Priority: Major
> Attachments: HBASE-17884-branch-1.patch,
> HBASE-17884.branch-1.001.patch
>
>
> The change to add calling user to ObserverContext in HBASE-16217 should also
> be applied to branch-1 to avoid use of UserGroupInformation.doAs() for access
> control checks.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
