gjacoby126 commented on PR #1456:
URL: https://github.com/apache/phoenix/pull/1456#issuecomment-1162287223

   Looks like the existing 5.x code wasn't calling the preCreateSchema hook 
properly, so the permission validation check wasn't happening. This behavior 
was hidden because the restrictive HBase API the code used to rely effectively 
ran an even more restrictive check. Removing the HBase check revealed the 
existing security hole. I've fixed the createSchema logic so that it matches 
the dropSchema logic and the test passes now. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to