[HBASE-28868] Add missing permission check for updateRSGroupConfig in branch-2

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.7.0, 2.6.1, 2.5.11
• Component/s: rsgroup
• Labels: pull-request-available
• Hadoop Flags: Reviewed
• Assignee: Nihal Jain
• Reporter: Nihal Jain
• Created: 20/Sep/24 11:26
• Updated: 25/Sep/24 21:21
• Resolved: 24/Sep/24 17:26

Description

Found this during HBASE-28867, we do not have security check for updateRSGroupConfig in branch-2. See https://github.com/apache/hbase/blob/0dc334f572329be7eb2455cec3519fc820c04c25/hbase-rsgroup/src/main/java/org/apache/hadoop/hbase/rsgroup/RSGroupAdminEndpoint.java#L450

Same check exists in master https://github.com/apache/hbase/blob/52082bc5b80a60406bfaaa630ed5cb23027436c1/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java#L2279

 

Issue Links

• relates to: HBASE-19400 Add missing security checks in MasterRpcServices
• relates to: HBASE-24431 RSGroupInfo add configuration map to store something extra
• links to: GitHub Pull Request #6277
• links to: GitHub Pull Request #6281
• links to: GitHub Pull Request #6282
• links to: GitHub Pull Request #6293