[HBASE-12723] Update ACL matrix to reflect reality

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Assignee: Srikanth Srungarapu
• Reporter: Enis Soztutar
• Created: 18/Dec/14 23:01
• Updated: 17/Jun/22 18:45
• Resolved: 10/Mar/15 00:57

Description

The ACL matrix in the book should be updated with the recent changes.
https://hbase.apache.org/book/appendix_acl_matrix.html

Also the format is not optimal. There is a hierarchy relation between scopes (GLOBAL > NS > TABLE), but not so much between Permissions (A,C,R)

Some things to do:

• Minimum Permission column does not make sense. We should replace it.
• Add information about superuser
• grant is a multi level thing. Required permissions depend on the scope.
• See HBASE-12511 and others changed some of the permissions

What I would like to see at the end is something like:

createNamespace        : superuser | global(A)
deleteNamespace        : superuser | global(A) | NS(A)
modifyNamespace        : superuser | global(A) | NS(A)
getNamespaceDescriptor : superuser | global(A) | NS(A)
listNamespaces         : All access*
createTable            : superuser | global(C) | NS(C)
grant 
  NS Perm              : superuser | global(A) | NS(A)
  Table Perm           : ...
revoke 
  NS Perm              : superuser | global(A) | NS(A)
  Table Perm           : ...
getPerms 
  NS perm              : superuser | global(A) | NS(A)
  Table Perm           : ...

See HBASE-12511.

Issue Links

• depends upon: HBASE-12774 Fix the inconsistent permission checks for bulkloading.
• is related to: HBASE-12511 namespace permissions - add support from table creation privilege in a namespace 'C'