[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13292442#comment-13292442
]
Laxman commented on HBASE-6096:
---
Thanks for your inputs Andy and Matt.
I considered these
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291985#comment-13291985
]
Andrew Purtell commented on HBASE-6096:
---
bq. Andy, do you mean we should not use
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291987#comment-13291987
]
Matteo Bertozzi commented on HBASE-6096:
{quote}I don't see how we can
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291993#comment-13291993
]
Andrew Purtell commented on HBASE-6096:
---
@Matteo, I don't follow. Users must always
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291994#comment-13291994
]
Matteo Bertozzi commented on HBASE-6096:
@Andrew when you a user create a table, a
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291999#comment-13291999
]
Andrew Purtell commented on HBASE-6096:
---
bq. @Andrew when you a user create a table,
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290925#comment-13290925
]
Laxman commented on HBASE-6096:
---
bq. So for some short period after a grant, access may be
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290941#comment-13290941
]
Andrew Purtell commented on HBASE-6096:
---
bq. In TableAuthManager, we may need to
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290950#comment-13290950
]
Andrew Purtell commented on HBASE-6096:
---
bq. Attached the ACL matrix based on my
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290971#comment-13290971
]
Laxman commented on HBASE-6096:
---
Thanks for quick review and response Andy.
+1 on removing
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290975#comment-13290975
]
Andrew Purtell commented on HBASE-6096:
---
bq. I feel these operations should be
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13290977#comment-13290977
]
Andrew Purtell commented on HBASE-6096:
---
bq. +1 on removing the concept of table
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291213#comment-13291213
]
Matteo Bertozzi commented on HBASE-6096:
ACL Matrix looks good to me, split
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291237#comment-13291237
]
Laxman commented on HBASE-6096:
---
bq. I don't understand why we need synchronize on _CACHE
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13291252#comment-13291252
]
Matteo Bertozzi commented on HBASE-6096:
{quote}And these data structures
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13289350#comment-13289350
]
Laxman commented on HBASE-6096:
---
Currently, concurrent access control operations (grant,
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13289453#comment-13289453
]
Andrew Purtell commented on HBASE-6096:
---
bq. Currently, concurrent access control
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288367#comment-13288367
]
Laxman commented on HBASE-6096:
---
One observation:
Revoke of Global permission is not taking
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288444#comment-13288444
]
Andrew Purtell commented on HBASE-6096:
---
bq. Revoke of Global permission is not
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13288504#comment-13288504
]
Laxman commented on HBASE-6096:
---
Thanks Andy. Added as a subtask [HBASE-6157] to this parent
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286445#comment-13286445
]
Laxman commented on HBASE-6096:
---
{quote}Matteo:
2) if you grant for 'A' you don't get RWC
so
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286485#comment-13286485
]
Andrew Purtell commented on HBASE-6096:
---
bq. IMO, its no use in restricting ADMIN
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285418#comment-13285418
]
Laxman commented on HBASE-6096:
---
{quote}2) if you grant for 'A' you don't get RWC
so admin
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285420#comment-13285420
]
Laxman commented on HBASE-6096:
---
bq. Read - checkAndPut/checkAndDelete
@Matteo, I feel these
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285554#comment-13285554
]
Matteo Bertozzi commented on HBASE-6096:
@Laxman if you look at TableAuthManager
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285611#comment-13285611
]
Laxman commented on HBASE-6096:
---
@Matteo, Thanks a lot for detailed explanation.
With your
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285766#comment-13285766
]
Andrew Purtell commented on HBASE-6096:
---
bq. hbase.superuser is read at startup
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285769#comment-13285769
]
Andrew Purtell commented on HBASE-6096:
---
bq. checkAndPut/checkAndDelete
These
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285771#comment-13285771
]
Andrew Purtell commented on HBASE-6096:
---
And to clarify, the superuser can do
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286125#comment-13286125
]
Enis Soztutar commented on HBASE-6096:
--
bq. The superuser shortcut should be removed.
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13286143#comment-13286143
]
Gary Helmling commented on HBASE-6096:
--
The one possible downside to dropping the
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284807#comment-13284807
]
Laxman commented on HBASE-6096:
---
Please validate my understanding and correct me.
1)
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284981#comment-13284981
]
Matteo Bertozzi commented on HBASE-6096:
1) no admin is different... able to do
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13284994#comment-13284994
]
Andrew Purtell commented on HBASE-6096:
---
Thanks Matteo, concur.
IMO, it's
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285373#comment-13285373
]
Laxman commented on HBASE-6096:
---
Thanks Matteo. I will try to come up with an ACL matrix
[
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13285402#comment-13285402
]
Matteo Bertozzi commented on HBASE-6096:
* Admin
** grant/revoke/get permission
**
36 matches
Mail list logo