[jira] [Updated] (HBASE-27035) failed to set file permission when node crash

2022-05-14 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-27035?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-27035: -- Description:  in SecureBulkLoadManager#secureBulkLoadHFiles, we have code like that: {code:java} for(Pair el:

[jira] [Created] (HBASE-27035) failed to set file permission when node crash

2022-05-14 Thread lujie (Jira)
lujie created HBASE-27035: - Summary: failed to set file permission when node crash Key: HBASE-27035 URL: https://issues.apache.org/jira/browse/HBASE-27035 Project: HBase Issue Type: Bug

[jira] [Updated] (HBASE-25892) 'False' should be 'True' in auditlog of listLabels

2021-05-17 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25892?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25892: -- Description: In method `listLabels` at line 932, it should be {code:java} logResult(true, "listLabels",

[jira] [Updated] (HBASE-25892) 'False' should be 'True' in auditlog of listLabels

2021-05-17 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25892?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25892: -- Description: In method `listLabels` at line 932, it should be {code:java} logResult(true, "listLabels",

[jira] [Commented] (HBASE-25892) 'False' should be 'True' in auditlog of listLabels

2021-05-17 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25892?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17346129#comment-17346129 ] lujie commented on HBASE-25892: --- I think this will confuse the Administrator  as the logs show that legal

[jira] [Updated] (HBASE-25877) Add access check for compactionSwitch

2021-05-12 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25877: -- Summary: Add access check for compactionSwitch (was: Add access check for switchCompaction) > Add access

[jira] [Updated] (HBASE-25877) Add access check for switchCompaction

2021-05-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25877: -- Summary: Add access check for switchCompaction (was: Add access check for switchCompaction and

[jira] [Updated] (HBASE-25877) Add access check for switchCompaction

2021-05-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25877: -- Description: Should we add access check for

[jira] [Updated] (HBASE-25877) Add access check for switchCompaction

2021-05-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25877: -- Description: Should we add access check for

[jira] [Updated] (HBASE-25877) Add access check for switchCompaction and compactRegion

2021-05-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25877: -- Summary: Add access check for switchCompaction and compactRegion (was: Add access check for

[jira] [Updated] (HBASE-25877) Add access check for switchCompaction

2021-05-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25877: -- Description: Should we add access check for

[jira] [Assigned] (HBASE-25877) Add access check for switchCompaction

2021-05-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25877?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reassigned HBASE-25877: - Assignee: lujie > Add access check for switchCompaction > -- > >

[jira] [Created] (HBASE-25877) Add access check for switchCompaction

2021-05-11 Thread lujie (Jira)
lujie created HBASE-25877: - Summary: Add access check for switchCompaction Key: HBASE-25877 URL: https://issues.apache.org/jira/browse/HBASE-25877 Project: HBase Issue Type: Bug

[jira] [Updated] (HBASE-25558) Adding audit log for execMasterService

2021-03-27 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25558: -- Description: Hi: I have found that in APIs, like execProcedure and execProcedureWithRet, have audit log to

[jira] [Updated] (HBASE-25558) Adding audit log for execMasterService

2021-03-27 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25558: -- Description: Aa (was: I think we should  add  audit log for execMasterService, like execProcedure) > Adding

[jira] [Assigned] (HBASE-25558) Adding audit log for execMasterService

2021-03-27 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reassigned HBASE-25558: - Assignee: lujie > Adding audit log for execMasterService > -- > >

[jira] [Updated] (HBASE-25558) Adding audit log for execMasterService

2021-02-09 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25558: -- Issue Type: Improvement (was: Bug) > Adding audit log for execMasterService >

[jira] [Updated] (HBASE-25558) Adding audit log for execMasterService

2021-02-08 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25558: -- Description: I think we should  add  audit log for execMasterService, like  execProcedure (was: It seem that

[jira] [Updated] (HBASE-25558) Adding audit log for execMasterService

2021-02-08 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25558?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25558: -- Description: It seem that we need add  audit log for execMasterService, like execProcedure > Adding audit

[jira] [Created] (HBASE-25558) Adding audit log for execMasterService

2021-02-08 Thread lujie (Jira)
lujie created HBASE-25558: - Summary: Adding audit log for execMasterService Key: HBASE-25558 URL: https://issues.apache.org/jira/browse/HBASE-25558 Project: HBase Issue Type: Bug

[jira] [Updated] (HBASE-25456) setRegionStateInMeta need security check

2021-01-04 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25456: -- Release Note: setRegionStateInMeta can be accessed only through Admin rights > setRegionStateInMeta need

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta and fixMeta

2021-01-04 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Release Note: setTableStateInMeta and fixMeta can be accessed only through Admin rights > we should add

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta and fixMeta

2021-01-04 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: setTableStateInMeta and fixMeta can be accessed only through Admin rights > we should add

[jira] [Updated] (HBASE-25456) setRegionStateInMeta need security check

2020-12-31 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25456: -- Priority: Critical (was: Major) > setRegionStateInMeta need security check >

[jira] [Resolved] (HBASE-25422) update_all_config should not be executed by non-admin user!!!

2020-12-30 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25422?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie resolved HBASE-25422. --- Resolution: Duplicate > update_all_config should not be executed by non-admin user!!! >

[jira] [Updated] (HBASE-25456) setRegionStateInMeta need security check

2020-12-30 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25456: -- Description: [Viraj Jasani|https://issues.apache.org/jira/secure/ViewProfile.jspa?name=vjasani]  it seems

[jira] [Updated] (HBASE-25456) setRegionStateInMeta need security check

2020-12-30 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25456: -- Description: [Viraj Jasani|https://issues.apache.org/jira/secure/ViewProfile.jspa?name=vjasani]  it seems

[jira] [Updated] (HBASE-25456) setRegionStateInMeta need security check

2020-12-30 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25456?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25456: -- Description: @ > setRegionStateInMeta need security check > > >

[jira] [Created] (HBASE-25456) setRegionStateInMeta need security check

2020-12-30 Thread lujie (Jira)
lujie created HBASE-25456: - Summary: setRegionStateInMeta need security check Key: HBASE-25456 URL: https://issues.apache.org/jira/browse/HBASE-25456 Project: HBase Issue Type: Bug

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description:   ||API||Severity||symptom|| |clearRegionBlockCache|Severe|The API will call

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description:   ||API||Severity||symptom|| |clearRegionBlockCache|Severe|The API will call

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description:   ||API||Severity||symptom|| |clearRegionBlockCache|Severe|The API will call

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description:   ||API||Severity||symptom|| |clearRegionBlockCache|Severe|The API will call

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description:   ||API||Severity||symptom|| |clearRegionBlockCache|Severe|The API will call

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: clearSlowLogsResponses clearRegionBlockCache updateConfiguration

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: clearSlowLogsResponses clearRegionBlockCache updateConfiguration was:

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: clearSlowLogsResponses clearRegionBlockCache was: getLogEntries clearSlowLogsResponses

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: getLogEntries clearSlowLogsResponses stopServer   Actually, "stopServer" has "preStop" check

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: getLogEntries clearSlowLogsResponses stopServer   Actually, "stopServer" has "preStop" check

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: getLogEntries clearSlowLogsResponses stopServer   Actually, "stopServer" has "preStop" check

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: getLogEntries clearSlowLogsResponses stopServer   Actually, "stopServer" has "preStop" check

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: getLogEntries clearSlowLogsResponses was: stopServer getLogEntries clearSlowLogsResponses

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: stopServer getLogEntries clearSlowLogsResponses > add security check for some APIs in

[jira] [Updated] (HBASE-25441) add security check for some APIs in RSRpcServices

2020-12-26 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Summary: add security check for some APIs in RSRpcServices (was: Unauthorized client can shutdown the

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta and fixMeta

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Summary: we should add security checks for setTableStateInMeta and fixMeta (was: we should add security

[jira] [Updated] (HBASE-25441) Unauthorized client can shutdown the regionserver

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Priority: Critical (was: Blocker) > Unauthorized client can shutdown the regionserver >

[jira] [Updated] (HBASE-25432) we should add security checks for stopServer

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Summary: we should add security checks for stopServer (was: we should add security checks for

[jira] [Updated] (HBASE-25441) Unauthorized client can shutdown the regionserver

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: (was: In think all the shutdowncomand  should gothrough master, by this we can authorize the

[jira] [Updated] (HBASE-25441) Unauthorized client can shutdown the regionserver

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: In think all the shutdowncomand  should gothrough master, by this we can authorize the user

[jira] [Updated] (HBASE-25441) Unauthorized client can shutdown the regionserver

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: In think all the shutcomand  should gothrough master, by this we can authorize the user request.

[jira] [Updated] (HBASE-25441) Unauthorized client can shutdown the regionserver

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25441?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25441: -- Description: In think all the shutcomand  should gothrough master, by this we can  > Unauthorized client can

[jira] [Created] (HBASE-25441) Unauthorized client can shutdown the regionserver

2020-12-23 Thread lujie (Jira)
lujie created HBASE-25441: - Summary: Unauthorized client can shutdown the regionserver Key: HBASE-25441 URL: https://issues.apache.org/jira/browse/HBASE-25441 Project: HBase Issue Type: Bug

[jira] [Commented] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17253966#comment-17253966 ] lujie commented on HBASE-25432: --- [~vjasani]  Hi, i have submit a patch, when we try fixMeta or 

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-23 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Attachment: HBASE-25432_1.patch > we should add security checks for setTableStateInMeta >

[jira] [Commented] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17253928#comment-17253928 ] lujie commented on HBASE-25432: --- yes, i will try my best to fix it. > we should add security checks for

[jira] [Comment Edited] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17253911#comment-17253911 ] lujie edited comment on HBASE-25432 at 12/23/20, 6:44 AM: -- We also find that 

[jira] [Commented] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17253911#comment-17253911 ] lujie commented on HBASE-25432: --- We also find that Hbck.fixMeta also lack of security check, non-admin can

[jira] [Commented] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25407?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17253845#comment-17253845 ] lujie commented on HBASE-25407: ---   [~vjasani]   {code:java} As far as this one is concerned, this

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: (was: t) > we should add security checks for setTableStateInMeta >

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Priority: Blocker (was: Major) > we should add security checks for setTableStateInMeta >

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: t > we should add security checks for setTableStateInMeta >

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: (was: setTableStateInMeta is public, that means anyone can call it.) > we should add

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: setTableStateInMeta is public, that means anyone can call it. (was: setTableStateInMeta is

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: setTableStateInMeta is public, this mean anyone can call it. > we should add security checks for

[jira] [Reopened] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reopened HBASE-25432: --- > we should add security checks for setTableStateInMeta > -

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: setTableStateInMeta is public, thiat means anyone can call it. (was: setTableStateInMeta is

[jira] [Updated] (HBASE-25432) we should add security checks for setTableStateInMeta

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Summary: we should add security checks for setTableStateInMeta (was: we should add security checks for

[jira] [Resolved] (HBASE-25432) we should add security checks for list_namespace_tables

2020-12-22 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie resolved HBASE-25432. --- Resolution: Not A Problem > we should add security checks for list_namespace_tables >

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: (was: list_namespace_tables miss security check.  listTableDescriptorsByNamespace has 

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Summary: we should add security checks for list_namespace_tables (was: we should add security checks for

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and fix securiry hole in listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: list_namespace_tables miss security check.  listTableDescriptorsByNamespace has security check,

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and fix securiry hole in listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: list_namespace_tables miss security check.    was:list_namespace_tables has no security

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and fix securiry hole in listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Summary: we should add security checks for list_namespace_tables and fix securiry hole in

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and fix securiry hole in listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: list_namespace_tables miss security check.   Even  was: list_namespace_tables miss security

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: list_namespace_tables has no  > we should add security checks for list_namespace_tables and >

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Description: list_namespace_tables has no security check. Even  (was: list_namespace_tables has no ) > we

[jira] [Updated] (HBASE-25432) we should add security checks for list_namespace_tables and listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25432: -- Summary: we should add security checks for list_namespace_tables and listTableDescriptorsByNamespace (was:

[jira] [Created] (HBASE-25432) we should add missing security checks for list_namespace_tables and listTableDescriptorsByNamespace

2020-12-21 Thread lujie (Jira)
lujie created HBASE-25432: - Summary: we should add missing security checks for list_namespace_tables and listTableDescriptorsByNamespace Key: HBASE-25432 URL: https://issues.apache.org/jira/browse/HBASE-25432

[jira] [Updated] (HBASE-25422) update_all_config should not be executed by non-admin user!!!

2020-12-19 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25422?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25422: -- Priority: Critical (was: Major) > update_all_config should not be executed by non-admin user!!! >

[jira] [Updated] (HBASE-25422) update_all_config should not be executed by non-admin user!!!

2020-12-19 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25422?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25422: -- Summary: update_all_config should not be executed by non-admin user!!! (was: update_all_config can be

[jira] [Created] (HBASE-25422) update_all_config can be executed by non-admin user

2020-12-19 Thread lujie (Jira)
lujie created HBASE-25422: - Summary: update_all_config can be executed by non-admin user Key: HBASE-25422 URL: https://issues.apache.org/jira/browse/HBASE-25422 Project: HBase Issue Type: Bug

[jira] [Updated] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-18 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25407: -- Description: I found that I can get other users' region information which is not expected.   For example i

[jira] [Updated] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-18 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25407: -- Description: I found that I can get other users' region information which is not expected.   For example i

[jira] [Updated] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-17 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25407: -- Description: I found that I can get other users' region information which is not expected.   For example i

[jira] [Updated] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-17 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25407: -- Attachment: image-2020-12-18-13-07-00-777.png > list_regions make potential sensitive information disclosure

[jira] [Created] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-17 Thread lujie (Jira)
lujie created HBASE-25407: - Summary: list_regions make potential sensitive information disclosure Key: HBASE-25407 URL: https://issues.apache.org/jira/browse/HBASE-25407 Project: HBase Issue Type:

[jira] [Updated] (HBASE-25407) list_regions make potential sensitive information disclosure

2020-12-17 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25407?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25407: -- Priority: Critical (was: Major) > list_regions make potential sensitive information disclosure >

[jira] [Resolved] (HBASE-25332) one NPE

2020-12-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie resolved HBASE-25332. --- Resolution: Fixed > one NPE > --- > > Key: HBASE-25332 > URL:

[jira] [Reopened] (HBASE-25332) one NPE

2020-12-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reopened HBASE-25332: --- > one NPE > --- > > Key: HBASE-25332 > URL:

[jira] [Resolved] (HBASE-25332) one NPE

2020-12-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie resolved HBASE-25332. --- Resolution: Fixed > one NPE > --- > > Key: HBASE-25332 > URL:

[jira] [Reopened] (HBASE-25332) one NPE

2020-12-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reopened HBASE-25332: --- > one NPE > --- > > Key: HBASE-25332 > URL:

[jira] [Resolved] (HBASE-25332) one NPE

2020-12-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie resolved HBASE-25332. --- Resolution: Fixed > one NPE > --- > > Key: HBASE-25332 > URL:

[jira] [Reopened] (HBASE-25332) one NPE

2020-12-11 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reopened HBASE-25332: --- > one NPE > --- > > Key: HBASE-25332 > URL:

[jira] [Updated] (HBASE-25332) one NPE

2020-11-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25332: -- Summary: one NPE (was: one NPEs) > one NPE > --- > > Key: HBASE-25332 >

[jira] [Updated] (HBASE-25332) one NPEs

2020-11-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25332: -- Summary: one NPEs (was: two NPEs) > one NPEs > > > Key: HBASE-25332 >

[jira] [Updated] (HBASE-25332) two NPEs

2020-11-28 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25332: -- Description: * getData can return null at 

[jira] [Assigned] (HBASE-25332) two NPEs

2020-11-27 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie reassigned HBASE-25332: - Assignee: lujie > two NPEs > > > Key: HBASE-25332 > URL:

[jira] [Updated] (HBASE-25332) two NPEs

2020-11-25 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25332: -- Summary: two NPEs (was: One pontential NPE) > two NPEs > > > Key: HBASE-25332 >

[jira] [Updated] (HBASE-25332) One pontential NPE

2020-11-25 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25332: -- Description: * getData can return null at 

[jira] [Updated] (HBASE-25332) One pontential NPE

2020-11-25 Thread lujie (Jira)
[ https://issues.apache.org/jira/browse/HBASE-25332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] lujie updated HBASE-25332: -- Description: * getData can return null at 

  1   2   3   >