dlmarion opened a new issue, #3010:
URL: https://github.com/apache/accumulo/issues/3010

   So, I merged #2994 after multiple successful IT builds. Created a new 
cluster using Terraform and the head of `main`. Created the `ci` table, then I 
went into the shell to check that the encryption properties that I set it the 
configuration were there. And, permission denied. Even thought according to 
`userpermissions` I have the correct ones.
   
   ```
    root@accumulo-testing> userpermissions
   System permissions: System.GRANT, System.CREATE_TABLE, System.DROP_TABLE, 
System.ALTER_TABLE, System.CREATE_USER, System.DROP_USER, System.ALTER_USER, 
System.SYSTEM, System.CREATE_NAMESPACE, System.DROP_NAMESPACE, 
System.ALTER_NAMESPACE, System.OBTAIN_DELEGATION_TOKEN
   
   Namespace permissions (accumulo): Namespace.READ, Namespace.ALTER_TABLE
   
   Table permissions (accumulo.metadata): Table.READ, Table.ALTER_TABLE
   Table permissions (accumulo.replication): Table.READ
   Table permissions (accumulo.root): Table.READ, Table.ALTER_TABLE
   Table permissions (ci): Table.READ, Table.WRITE, Table.BULK_IMPORT, 
Table.ALTER_TABLE, Table.GRANT, Table.DROP_TABLE, Table.GET_SUMMARIES
   root@accumulo-testing> config -t accumulo.root
   2022-10-07T19:35:28,604 [shell.Shell] ERROR: 
org.apache.accumulo.core.client.AccumuloException: 
org.apache.accumulo.core.client.AccumuloSecurityException: Error 
PERMISSION_DENIED for user root - User does not have permission to perform this 
action
   root@accumulo-testing> config -t accumulo.metadata
   2022-10-07T19:35:31,563 [shell.Shell] ERROR: 
org.apache.accumulo.core.client.AccumuloException: 
org.apache.accumulo.core.client.AccumuloSecurityException: Error 
PERMISSION_DENIED for user root - User does not have permission to perform this 
action
   root@accumulo-testing> config -t ci
   2022-10-07T19:35:37,635 [shell.Shell] ERROR: 
org.apache.accumulo.core.client.AccumuloException: 
org.apache.accumulo.core.client.AccumuloSecurityException: Error 
PERMISSION_DENIED for user root - User does not have permission to perform this 
action
   ```
   
   But, I have no issue scanning the tables:
   ```
   root@accumulo-testing> table ci
   root@accumulo-testing ci> scan
   root@accumulo-testing ci> table accumulo.metadata
   root@accumulo-testing accumulo.metadata> scan
   +rep< srv:dir []     default_tablet
   +rep< srv:time []    L0
   +rep< ~tab:~pr []    \x00
   ...
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to