[HBASE-11013] Clone Snapshots on Secure Cluster Should provide option to apply Retained User Permissions

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.4.0, 2.0.0
• Component/s: snapshots
• Hadoop Flags: Incompatible change, Reviewed

Release Note

While creating a snapshot, it will save permissions of the original table into .snapshotinfo file(Backward compatibility) , which is in the snapshot root directory. For clone_snapshot/restore_snapshot command, we provide an additional option( RESTORE_ACL) to decide whether we will grant permissons of the origin table to the newly created table.

• Assignee: Zheng Hu
• Reporter: Ted Yu
• Created: 17/Apr/14 03:32
• Updated: 17/Jun/22 05:33
• Resolved: 18/May/17 09:57

Description

Currently,

sudo su - test_user
create 't1', 'f1'
sudo su - hbase
snapshot 't1', 'snap_one'
clone_snapshot 'snap_one', 't2'

In this scenario the user - test_user would not have permissions for the clone table t2.
We need to add improvement feature such that the permissions of the original table are recorded in snapshot metadata and an option is provided for applying them to the new table as part of the clone process.

Issue Links

• breaks: HBASE-26462 Should persist restoreAcl flag in the procedure state for CloneSnapshotProcedure and RestoreSnapshotProcedure
• links to: Review Board
• links to: Review Board(Branch-1)

Sub-Tasks

• Create a copy of AccessControl.proto under hbase-protocol-shaed module: Closed