[ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13292091#comment-13292091 ]
Laxman commented on HBASE-6188: ------------------------------- In contrast to regular RDBMS notations, I considered all the above operations as DDL. May be I coined a wrong word here. AddColumn, DeleteColumn, DeleteTable, DisableTable, EnableTable, ModifyColumn, ModifyTable We have the following options now. Approach #1: DDL operations requires "C" Approach #2: DDL operations requires "A" Approach #3: DDL operatoins requires either "C" or "A" Personally I prefer to go with #1 as it makes it clean. Note that above list of operations doesn't contain CreateTable which requires "C". So this another reason for my preference for #1. > Remove the concept of table owner > --------------------------------- > > Key: HBASE-6188 > URL: https://issues.apache.org/jira/browse/HBASE-6188 > Project: HBase > Issue Type: Sub-task > Components: security > Reporter: Andrew Purtell > Assignee: Laxman > Labels: security > > The table owner concept was a design simplification in the initial drop. > First, the design changes under review means only a user with GLOBAL CREATE > permission can create a table, which will probably be an administrator. > Then, granting implicit permissions may lead to oversights and it adds > unnecessary conditionals to our code. So instead the administrator with > GLOBAL CREATE permission should make the appropriate grants at table create > time. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa For more information on JIRA, see: http://www.atlassian.com/software/jira