[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-09 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292442#comment-13292442 ] Laxman commented on HBASE-6096: --- Thanks for your inputs Andy and Matt. I considered these

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-08 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291985#comment-13291985 ] Andrew Purtell commented on HBASE-6096: --- bq. Andy, do you mean we should not use

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-08 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291987#comment-13291987 ] Matteo Bertozzi commented on HBASE-6096: {quote}I don't see how we can

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-08 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291993#comment-13291993 ] Andrew Purtell commented on HBASE-6096: --- @Matteo, I don't follow. Users must always

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-08 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291994#comment-13291994 ] Matteo Bertozzi commented on HBASE-6096: @Andrew when you a user create a table, a

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-08 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291999#comment-13291999 ] Andrew Purtell commented on HBASE-6096: --- bq. @Andrew when you a user create a table,

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290925#comment-13290925 ] Laxman commented on HBASE-6096: --- bq. So for some short period after a grant, access may be

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290941#comment-13290941 ] Andrew Purtell commented on HBASE-6096: --- bq. In TableAuthManager, we may need to

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290950#comment-13290950 ] Andrew Purtell commented on HBASE-6096: --- bq. Attached the ACL matrix based on my

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290971#comment-13290971 ] Laxman commented on HBASE-6096: --- Thanks for quick review and response Andy. +1 on removing

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290975#comment-13290975 ] Andrew Purtell commented on HBASE-6096: --- bq. I feel these operations should be

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290977#comment-13290977 ] Andrew Purtell commented on HBASE-6096: --- bq. +1 on removing the concept of table

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291213#comment-13291213 ] Matteo Bertozzi commented on HBASE-6096: ACL Matrix looks good to me, split

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291237#comment-13291237 ] Laxman commented on HBASE-6096: --- bq. I don't understand why we need synchronize on _CACHE

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-07 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291252#comment-13291252 ] Matteo Bertozzi commented on HBASE-6096: {quote}And these data structures

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-05 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13289350#comment-13289350 ] Laxman commented on HBASE-6096: --- Currently, concurrent access control operations (grant,

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-05 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13289453#comment-13289453 ] Andrew Purtell commented on HBASE-6096: --- bq. Currently, concurrent access control

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-04 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288367#comment-13288367 ] Laxman commented on HBASE-6096: --- One observation: Revoke of Global permission is not taking

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-04 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288444#comment-13288444 ] Andrew Purtell commented on HBASE-6096: --- bq. Revoke of Global permission is not

[jira] [Commented] (HBASE-6096) AccessController v2

2012-06-04 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288504#comment-13288504 ] Laxman commented on HBASE-6096: --- Thanks Andy. Added as a subtask [HBASE-6157] to this parent

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-31 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286445#comment-13286445 ] Laxman commented on HBASE-6096: --- {quote}Matteo: 2) if you grant for 'A' you don't get RWC so

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-31 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286485#comment-13286485 ] Andrew Purtell commented on HBASE-6096: --- bq. IMO, its no use in restricting ADMIN

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285418#comment-13285418 ] Laxman commented on HBASE-6096: --- {quote}2) if you grant for 'A' you don't get RWC so admin

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285420#comment-13285420 ] Laxman commented on HBASE-6096: --- bq. Read - checkAndPut/checkAndDelete @Matteo, I feel these

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285554#comment-13285554 ] Matteo Bertozzi commented on HBASE-6096: @Laxman if you look at TableAuthManager

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285611#comment-13285611 ] Laxman commented on HBASE-6096: --- @Matteo, Thanks a lot for detailed explanation. With your

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285766#comment-13285766 ] Andrew Purtell commented on HBASE-6096: --- bq. hbase.superuser is read at startup

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285769#comment-13285769 ] Andrew Purtell commented on HBASE-6096: --- bq. checkAndPut/checkAndDelete These

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285771#comment-13285771 ] Andrew Purtell commented on HBASE-6096: --- And to clarify, the superuser can do

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Enis Soztutar (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286125#comment-13286125 ] Enis Soztutar commented on HBASE-6096: -- bq. The superuser shortcut should be removed.

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-30 Thread Gary Helmling (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286143#comment-13286143 ] Gary Helmling commented on HBASE-6096: -- The one possible downside to dropping the

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284807#comment-13284807 ] Laxman commented on HBASE-6096: --- Please validate my understanding and correct me. 1)

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284981#comment-13284981 ] Matteo Bertozzi commented on HBASE-6096: 1) no admin is different... able to do

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284994#comment-13284994 ] Andrew Purtell commented on HBASE-6096: --- Thanks Matteo, concur. IMO, it's

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Laxman (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285373#comment-13285373 ] Laxman commented on HBASE-6096: --- Thanks Matteo. I will try to come up with an ACL matrix

[jira] [Commented] (HBASE-6096) AccessController v2

2012-05-29 Thread Matteo Bertozzi (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285402#comment-13285402 ] Matteo Bertozzi commented on HBASE-6096: * Admin ** grant/revoke/get permission **