[jira] [Commented] (HBASE-19403) Add missing security checks for AdminService RPCs

2018-02-22 Thread stack (JIRA) 

[ 
https://issues.apache.org/jira/browse/HBASE-19403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16373590#comment-16373590
 ] 

stack commented on HBASE-19403:
---

If it just ADMIN then one cluster will blocked replicating to another?

Other methods requiring ADMIN seem fine.

> Add missing security checks for AdminService RPCs
> -
>
> Key: HBASE-19403
> URL: https://issues.apache.org/jira/browse/HBASE-19403
> Project: HBase
>  Issue Type: Sub-task
>Affects Versions: 2.0.0-beta-1
>Reporter: Balazs Meszaros
>Assignee: Appy
>Priority: Major
>
> The following RPC methods do not call the observers, therefore they are not 
> guarded by AccessController:
> - updateConfiguration
> - replay
> - warmupRegion
> - updateFavoredNodes
> - clearRegionBlockCache



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (HBASE-19403) Add missing security checks for AdminService RPCs

2018-02-18 Thread Appy (JIRA) 

[ 
https://issues.apache.org/jira/browse/HBASE-19403?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16368789#comment-16368789
 ] 

Appy commented on HBASE-19403:
--

Idk what's the best for replay() fn. Not sure if it should be just admin. Or 
create-global would also be sufficient?
What will be it's effect on replication, if any? [~Apache9] any ideas?

Making following require ADMIN
- updateConfiguration
- warmupRegion
- updateFavoredNodes
clearRegionBlockCache

> Add missing security checks for AdminService RPCs
> -
>
> Key: HBASE-19403
> URL: https://issues.apache.org/jira/browse/HBASE-19403
> Project: HBase
>  Issue Type: Sub-task
>Affects Versions: 2.0.0-beta-1
>Reporter: Balazs Meszaros
>Assignee: Appy
>Priority: Major
>
> The following RPC methods do not call the observers, therefore they are not 
> guarded by AccessController:
> - updateConfiguration
> - replay
> - warmupRegion
> - updateFavoredNodes
> - clearRegionBlockCache



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)