Re: Read only user permissions to Phoenix table - Phoenix 4.5

[基础平台部]

why “RXC” is needed the minimum?

在 2017年2月17日，09:15，Sergey Soldatov 
> 写道：

Unfortunately some versions of Phoenix client is using HBase API (such as 
getHTableDescriptor) that requires HBase CREATE/ADMIN permissions on system 
tables. Moreover the upgrade path is trying to create system tables to check 
whether system requires an upgrade and that may fail with permission exception 
(that's your case).  Mostly those problems should be gone in 4.9 where upgrade 
is the manual operation. So, no easy way to avoid this problem without patching 
the sources (patch itself is obvious though).

Thanks,
Sergey

On Thu, Feb 16, 2017 at 2:03 AM, Pedro Boado 
> wrote:
Hi all,

I have a quick question. We are still running on Phoenix 4.5 (I know, it's not 
my fault) and we're trying to setup a read only user on a phoenix table. The 
minimum set of permissions to get access through sqlline is

grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'

I was wondering whether there is a way for avoiding the need of the CREATE 
permission on catalog tables.

Cheers,
Pedro.

Re: Read only user permissions to Phoenix table - Phoenix 4.5

[Sergey Soldatov]

Unfortunately some versions of Phoenix client is using HBase API (such
as getHTableDescriptor)
that requires HBase CREATE/ADMIN permissions on system tables. Moreover the
upgrade path is trying to create system tables to check whether system
requires an upgrade and that may fail with permission exception (that's
your case).  Mostly those problems should be gone in 4.9 where upgrade is
the manual operation. So, no easy way to avoid this problem without
patching the sources (patch itself is obvious though).

Thanks,
Sergey

On Thu, Feb 16, 2017 at 2:03 AM, Pedro Boado  wrote:

> Hi all,
>
> I have a quick question. We are still running on Phoenix 4.5 (I know, it's
> not my fault) and we're trying to setup a read only user on a phoenix
> table. The minimum set of permissions to get access through sqlline is
>
> grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
> grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
> grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
> grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
> grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'
>
> I was wondering whether there is a way for avoiding the need of the CREATE
> permission on catalog tables.
>
> Cheers,
> Pedro.
>
>

Read only user permissions to Phoenix table - Phoenix 4.5

[Pedro Boado]

Hi all,

I have a quick question. We are still running on Phoenix 4.5 (I know, it's
not my fault) and we're trying to setup a read only user on a phoenix
table. The minimum set of permissions to get access through sqlline is

grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'

I was wondering whether there is a way for avoiding the need of the CREATE
permission on catalog tables.

Cheers,
Pedro.