Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-18799 Revisit the AccessControl
  3. HBASE-19400

Add missing security checks in MasterRpcServices

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.0.0-beta-1
    • 2.0.0-beta-2, 2.0.0
    • None
    • None
    • Hide
      Added ACL check to following Admin functions:
      enableCatalogJanitor, runCatalogJanitor, cleanerChoreSwitch, runCleanerChore, execProcedure, execProcedureWithReturn, normalize, normalizerSwitch, coprocessorService.
      When ACL is enabled, only those with ADMIN rights will be able to invoke these operations successfully.
      Show
      Added ACL check to following Admin functions: enableCatalogJanitor, runCatalogJanitor, cleanerChoreSwitch, runCleanerChore, execProcedure, execProcedureWithReturn, normalize, normalizerSwitch, coprocessorService. When ACL is enabled, only those with ADMIN rights will be able to invoke these operations successfully.

    Description

      The following RPC methods in MasterRpcServices do not have ACL check for ADMIN rights.

      • normalize
      • setNormalizerRunning
      • runCatalogScan
      • enableCatalogJanitor
      • runCleanerChore
      • setCleanerChoreRunning
      • execMasterService
      • execProcedure
      • execProcedureWithRet

      Attachments

        1. HBASE-19400.branch-1.001.patch
          40 kB
          Apekshit Sharma
        2. HBASE-19400.master.007.patch
          41 kB
          Michael Stack
        3. HBASE-19400.master.007.patch
          41 kB
          Apekshit Sharma
        4. HBASE-19400.master.006.patch
          41 kB
          Apekshit Sharma
        5. HBASE-19400.master.005.patch
          39 kB
          Apekshit Sharma
        6. HBASE-19400.master.004.patch
          36 kB
          Michael Stack
        7. HBASE-19400.master.004.patch
          36 kB
          Apekshit Sharma
        8. HBASE-19400.master.003.patch
          28 kB
          Apekshit Sharma
        9. HBASE-19400.master.002.patch
          34 kB
          Balazs Meszaros
        10. HBASE-19400.master.001.patch
          34 kB
          Balazs Meszaros

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. HBASE-20185 Fix ACL check for MasterRpcServices#execProcedure

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link Review Board

          Web Link Review Board (master)

          Activity

            People

              appy Apekshit Sharma
              meszibalu Balazs Meszaros
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: