[jira] [Updated] (HBASE-6157) Revoke of Global permission is not taking effect without restart.

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6157: -- Attachment: (was: HBASE-5372.patch) Revoke of Global permission is not taking effect without restart.

[jira] [Updated] (HBASE-6157) Revoke of Global permission is not taking effect without restart.

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6157: -- Attachment: HBASE-5372.patch Revoke of Global permission is not taking effect without restart.

[jira] [Updated] (HBASE-5372) Table mutation operations should check table level rights, not global rights

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-5372?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-5372: -- Status: Patch Available (was: Open) Table mutation operations should check table level rights, not

[jira] [Commented] (HBASE-5372) Table mutation operations should check table level rights, not global rights

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-5372?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292014#comment-13292014 ] Laxman commented on HBASE-5372: --- Thanks for the review Andy. Yes, I need some more time for

[jira] [Updated] (HBASE-6157) Revoke of Global permission is not taking effect without restart.

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6157: -- Attachment: HBASE-6157.patch Revoke of Global permission is not taking effect without restart.

[jira] [Updated] (HBASE-6157) Revoke of Global permission is not taking effect without restart.

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6157?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6157: -- Fix Version/s: 0.94.1 0.96.0 Status: Patch Available (was: Open) Attached the

[jira] [Commented] (HBASE-6188) Remove the concept of table owner

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292056#comment-13292056 ] Laxman commented on HBASE-6188: --- ok Andy. I'm proceeding with this approach. Earlier we

[jira] [Commented] (HBASE-6192) Document ACL matrix in the book

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6192?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292077#comment-13292077 ] Laxman commented on HBASE-6192: --- bq. Once the changes are done I will update the matrix

[jira] [Commented] (HBASE-6188) Remove the concept of table owner

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292091#comment-13292091 ] Laxman commented on HBASE-6188: --- In contrast to regular RDBMS notations, I considered all

[jira] [Commented] (HBASE-6157) Revoke of Global permission is not taking effect without restart.

2012-06-08 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292099#comment-13292099 ] Laxman commented on HBASE-6157: --- {quote} -1 core tests. The patch failed these unit tests:

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290925#comment-13290925 ] Laxman commented on HBASE-6096: --- bq. So for some short period after a grant, access may be

[jira] [Updated] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6096: -- Attachment: Security-ACL Matrix.pdf Attached the ACL matrix based on my understanding. Request for review and

[jira] [Created] (HBASE-6187) User cache and Global cache should be thread safe to pr.

2012-06-07 Thread Laxman (JIRA)
Laxman created HBASE-6187: - Summary: User cache and Global cache should be thread safe to pr. Key: HBASE-6187 URL: https://issues.apache.org/jira/browse/HBASE-6187 Project: HBase Issue Type:

[jira] [Updated] (HBASE-6187) User cache and Global cache should be thread safe.

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6187?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6187: -- Component/s: security Description: TableAuthManager: User cache and Global cache should be thread safe.

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290971#comment-13290971 ] Laxman commented on HBASE-6096: --- Thanks for quick review and response Andy. +1 on removing

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291237#comment-13291237 ] Laxman commented on HBASE-6096: --- bq. I don't understand why we need synchronize on _CACHE

[jira] [Commented] (HBASE-5372) Table mutation operations should check table level rights, not global rights

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-5372?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291264#comment-13291264 ] Laxman commented on HBASE-5372: --- @Enis, would you mind if I submit a patch.

[jira] [Commented] (HBASE-6188) Remove the concept of table owner

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291292#comment-13291292 ] Laxman commented on HBASE-6188: --- I think we need to do the following. 1) In PostCreate - We

[jira] [Assigned] (HBASE-6186) Assure thread safety

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6186?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman reassigned HBASE-6186: - Assignee: Laxman Assure thread safety Key: HBASE-6186

[jira] [Assigned] (HBASE-6188) Remove the concept of table owner

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman reassigned HBASE-6188: - Assignee: Laxman Remove the concept of table owner -

[jira] [Updated] (HBASE-6188) Remove the concept of table owner

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6188?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6188: -- Component/s: security Tags: Huawei Labels: security (was: ) Remove the concept of

[jira] [Updated] (HBASE-6186) Assure thread safety

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6186?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6186: -- Component/s: security Affects Version/s: 0.94.1 0.96.0

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-05 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13289350#comment-13289350 ] Laxman commented on HBASE-6096: --- Currently, concurrent access control operations (grant,

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-04 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288367#comment-13288367 ] Laxman commented on HBASE-6096: --- One observation: Revoke of Global permission is not taking

[jira] [Created] (HBASE-6157) Revoke of Global permission is not taking effect without restart.

2012-06-04 Thread Laxman (JIRA)
Laxman created HBASE-6157: - Summary: Revoke of Global permission is not taking effect without restart. Key: HBASE-6157 URL: https://issues.apache.org/jira/browse/HBASE-6157 Project: HBase Issue

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-04 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288504#comment-13288504 ] Laxman commented on HBASE-6096: --- Thanks Andy. Added as a subtask [HBASE-6157] to this parent

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-31 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286445#comment-13286445 ] Laxman commented on HBASE-6096: --- {quote}Matteo: 2) if you grant for 'A' you don't get RWC so

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285418#comment-13285418 ] Laxman commented on HBASE-6096: --- {quote}2) if you grant for 'A' you don't get RWC so admin

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285420#comment-13285420 ] Laxman commented on HBASE-6096: --- bq. Read - checkAndPut/checkAndDelete @Matteo, I feel these

[jira] [Updated] (HBASE-6062) preCheckAndPut/Delete() checks for READ when also a WRITE is performed

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6062?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-6062: -- Component/s: security preCheckAndPut/Delete() checks for READ when also a WRITE is performed

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285611#comment-13285611 ] Laxman commented on HBASE-6096: --- @Matteo, Thanks a lot for detailed explanation. With your

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284807#comment-13284807 ] Laxman commented on HBASE-6096: --- Please validate my understanding and correct me. 1)

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285373#comment-13285373 ] Laxman commented on HBASE-6096: --- Thanks Matteo. I will try to come up with an ACL matrix

[jira] [Updated] (HBASE-5498) Secure Bulk Load

2012-05-27 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-5498?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Laxman updated HBASE-5498: -- Component/s: security mapred Secure Bulk Load Key:

[jira] [Commented] (HBASE-5352) ACL improvements

2012-05-24 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-5352?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13282382#comment-13282382 ] Laxman commented on HBASE-5352: --- Enis Matt, hope you don't mind if I add some sub-tasks

[jira] [Commented] (HBASE-5352) ACL improvements

2012-05-24 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-5352?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13283116#comment-13283116 ] Laxman commented on HBASE-5352: --- Yes Matt, there are many other apis which are not checked

[jira] [Created] (HBASE-6092) Authorize flush, split operations in AccessController

2012-05-24 Thread Laxman (JIRA)
Laxman created HBASE-6092: - Summary: Authorize flush, split operations in AccessController Key: HBASE-6092 URL: https://issues.apache.org/jira/browse/HBASE-6092 Project: HBase Issue Type: Sub-task

[jira] [Commented] (HBASE-6061) Fix ACL Admin Table inconsistent permission check

2012-05-23 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6061?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13282173#comment-13282173 ] Laxman commented on HBASE-6061: --- Sorry for late reporting. Still some inconsistency exists

[jira] [Commented] (HBASE-6077) Document the most common secure RPC troubleshooting resolutions

2012-05-23 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13282183#comment-13282183 ] Laxman commented on HBASE-6077: --- Thanks Andy for considering the inputs and quick patch.

[jira] [Created] (HBASE-6086) Admin operations on a table should be authorized against table permissions instead of global permissions.

2012-05-23 Thread Laxman (JIRA)
Laxman created HBASE-6086: - Summary: Admin operations on a table should be authorized against table permissions instead of global permissions. Key: HBASE-6086 URL: https://issues.apache.org/jira/browse/HBASE-6086

[jira] [Commented] (HBASE-6061) Fix ACL Admin Table inconsistent permission check

2012-05-23 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6061?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13282191#comment-13282191 ] Laxman commented on HBASE-6061: --- Thanks Ted. Filed under HBASE-6086. Fix

[jira] [Commented] (HBASE-6086) Admin operations on a table should be authorized against table permissions instead of global permissions.

2012-05-23 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6086?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13282197#comment-13282197 ] Laxman commented on HBASE-6086: --- Thanks Mat. I will discuss in HBASE-5372.

[jira] [Commented] (HBASE-1697) Discretionary access control

2012-05-22 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13280832#comment-13280832 ] Laxman commented on HBASE-1697: --- Thanks for the info Andrew. I'm discussing this issue with

[jira] [Commented] (HBASE-1697) Discretionary access control

2012-05-22 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13280904#comment-13280904 ] Laxman commented on HBASE-1697: --- Able to find the issue. In client machines we didn't

[jira] [Commented] (HBASE-1697) Discretionary access control

2012-05-17 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13277677#comment-13277677 ] Laxman commented on HBASE-1697: --- We are trying to setup a secure HBase

<    1   2