Laxman created HBASE-6086:
-----------------------------
Summary: Admin operations on a table should be authorized against
table permissions instead of global permissions.
Key: HBASE-6086
URL: https://issues.apache.org/jira/browse/HBASE-6086
Project: HBase
Issue Type: Sub-task
Components: security
Affects Versions: 0.94.0
Reporter: Laxman
Assignee: Laxman
Still some inconsistency exists after HBASE-6061. We actually need to authorize
against table permissions instead of global permissions here.
{code}
+ private void requireTableAdminPermission(MasterCoprocessorEnvironment e,
+ byte[] tableName) throws IOException {
+ if (isActiveUserTableOwner(e, tableName)) {
+ requirePermission(Permission.Action.CREATE);
+ } else {
+ requirePermission(Permission.Action.ADMIN);
+ }
+ }
{code}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
