[HBASE-20639] Implement permission checking through AccessController instead of RSGroupAdminEndpoint

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Hadoop Flags: Reviewed
• Assignee: Nihal Jain
• Reporter: Ted Yu
• Created: 24/May/18 15:45
• Updated: 19/Apr/23 12:58
• Resolved: 19/Apr/23 12:58

Description

Currently permission checking for various RS group operations is done via RSGroupAdminEndpoint.
e.g. in RSGroupAdminServiceImpl#moveServers() :

        checkPermission("moveServers");
        groupAdminServer.moveServers(hostPorts, request.getTargetGroup());

The practice in remaining parts of hbase is to perform permission checking within AccessController.

Now that observer hooks for RS group operations are in right place, we should follow best practice and move permission checking to AccessController.

Issue Links

• is fixed by: HBASE-22932 Add rs group management methods in Admin and AsyncAdmin