Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-10226

[AccessController] Namespace grants not always checked

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Critical
    • Resolution: Fixed
    • 0.98.0, 0.96.2, 0.99.0
    • 0.98.0, 0.99.0
    • security
    • None
    • Reviewed

    Description

      Namespace grants for a user are supposed to supercede table level permissions, a middle tier between table grants and global grants. We are not always checking.

      Attachments

        1. 10226-0.96.patch
          11 kB
          Andrew Kyle Purtell
        2. 10226-0.96.patch
          10 kB
          Andrew Kyle Purtell
        3. 10226-0.96.patch
          11 kB
          Andrew Kyle Purtell
        4. 10226.patch
          12 kB
          Andrew Kyle Purtell
        5. 10226.patch
          11 kB
          Andrew Kyle Purtell
        6. 10226.patch
          12 kB
          Andrew Kyle Purtell

        Issue Links

          blocks

          New Feature - A new feature of the product, which has yet to be developed. HBASE-6104 Require EXEC permission to call coprocessor endpoints

          • Major - Major loss of function.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. HBASE-10235 Backport HBASE-10226 (Namespace grants not always checked) to 0.96

          • Major - Major loss of function.
          • Closed

          Activity

            People

              apurtell Andrew Kyle Purtell
              apurtell Andrew Kyle Purtell
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: