Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16141 Unwind use of UserGroupInformation.doAs() to convey requester identity in coprocessor upcalls
  3. HBASE-16217

Identify calling user in ObserverContext

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 2.0.0
    • Coprocessors, security
    • None

    Description

      We already either explicitly pass down the relevant User instance initiating an action through the call path, or it is available through RpcServer.getRequestUser(). We should carry this through in the ObserverContext for coprocessor upcalls and make use of it for permissions checking.

      Attachments

        1. HBASE-16217.master.003.patch
          140 kB
          Gary Helmling
        2. HBASE-16217.master.002.patch
          140 kB
          Gary Helmling
        3. HBASE-16217.master.001.patch
          137 kB
          Gary Helmling
        4. HBASE-16217.branch-1.001.patch
          133 kB
          Gary Helmling

        Activity

          People

            ghelmling Gary Helmling
            ghelmling Gary Helmling
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: