Details
-
Improvement
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
Reviewed
Description
A TODO in TablePermission.java
//TODO refactor this class //we need to refacting this into three classes (Global, Table, Namespace)
Change Notes:
- Divide origin TablePermission into three classes GlobalPermission, NamespacePermission, TablePermission
- New UserPermission consists of a user name(string, not byte[], for convenience) and a permission in one of [Global, Namespace, Table]Permission.
- Rename TableAuthManager to AuthManager(it is IA.P), and rename some methods for readability.
- Make PermissionCache thread safe, and the ListMultiMap is changed to Set.
- User cache and group cache in AuthManager is combined together.
- Wire proto is kept, BC should be under guarantee.
- Fix
HBASE-21390. - Resolve a small TODO global entry should be handled differently in AccessControlLists
- Add a new api in Permission#getAccessScope()
Attachments
Attachments
Issue Links
- breaks
-
HBASE-22503 Failed to upgrade to 2.2+ as the global permission which storaged in zk is not right
- Resolved
-
HBASE-21489 TestShell is broken
- Resolved
- contains
-
HBASE-19698 Use CHM instead of CLSM in TableAuthManager
- Resolved
- is related to
-
HBASE-21390 [test] TestRpcAccessChecks is buggy
- Resolved
- relates to
-
HBASE-21677 Port (HBASE-21255 [acl] Refactor TablePermission into three classes) to branch-1
- Resolved
- links to
(1 links to)