[ACCUMULO-3637] Users should not need SYSTEM permission to read authorizations

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0, 1.6.0
• Fix Version/s: 1.7.0
• Labels: operations security
• Assignee: Christopher Tubbs
• Reporter: Sean Busbey
• Created: 04/Mar/15 15:20
• Updated: 08/Apr/15 00:19
• Resolved: 08/Apr/15 00:19

Description

Currently, users must have System.SYSTEM permission to get the authorizations of another user.

Either System.ALTER_USER should suffice or we should add an additional permission (i.e. System.READ_AUTHS).