[HBASE-12098] User granted namespace table create permissions can't create a table

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 0.98.6
• Fix Version/s: 0.98.7, 0.99.1
• Component/s: Client, security
• Assignee: Srikanth Srungarapu
• Reporter: Dima Spivak
• Created: 25/Sep/14 19:03
• Updated: 06/Apr/18 17:54
• Resolved: 30/Sep/14 18:22

Description

From the HBase shell and Java API, I am seeing

ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'dima' (global, action=CREATE)

when I try to create a table in a namespace to which I have been granted RWXCA permissions by a global admin. Interestingly enough, this only seems to extend to table creation; the same user is then allowed to disable and drop a table created by a global admin in that namespace.