HBase
  1. HBase
  2. HBASE-5352 ACL improvements
  3. HBASE-5371

Introduce AccessControllerProtocol.checkPermissions(Permission[] permissons) API

    Details

    • Type: Sub-task Sub-task
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.92.1, 0.94.0
    • Fix Version/s: 0.94.0
    • Component/s: security
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      We need to introduce something like AccessControllerProtocol.checkPermissions(Permission[] permissions) API, so that clients can check access rights before carrying out the operations. We need this kind of operation for HCATALOG-245, which introduces authorization providers for hbase over hcat. We cannot use getUserPermissions() since it requires ADMIN permissions on the global/table level.

      1. HBASE-5371_v2.patch
        15 kB
        Ted Yu
      2. HBASE-5371_v3.patch
        15 kB
        Ted Yu
      3. HBASE-5371_v3-noprefix.patch
        16 kB
        Enis Soztutar
      4. HBASE-5371-addendum_v1.patch
        1 kB
        Enis Soztutar

        Issue Links

          Activity

          Lars Hofhansl made changes -
          Status Resolved [ 5 ] Closed [ 6 ]
          Lars Hofhansl made changes -
          Status Reopened [ 4 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          Enis Soztutar made changes -
          Attachment HBASE-5371-addendum_v1.patch [ 12515524 ]
          Andrew Purtell made changes -
          Resolution Fixed [ 1 ]
          Status Resolved [ 5 ] Reopened [ 4 ]
          Ted Yu made changes -
          Status Patch Available [ 10002 ] Resolved [ 5 ]
          Resolution Fixed [ 1 ]
          Ted Yu made changes -
          Hadoop Flags Reviewed [ 10343 ]
          Fix Version/s 0.94.0 [ 12316419 ]
          Enis Soztutar made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Enis Soztutar made changes -
          Attachment HBASE-5371_v3-noprefix.patch [ 12514568 ]
          Enis Soztutar made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Enis Soztutar made changes -
          Link This issue relates to HBASE-5400 [ HBASE-5400 ]
          Ted Yu made changes -
          Comment [ -1 overall. Here are the results of testing the latest attachment
            http://issues.apache.org/jira/secure/attachment/12514516/HBASE-5371_v3.patch
            against trunk revision .

              +1 @author. The patch does not contain any @author tags.

              +1 tests included. The patch appears to include 6 new or modified tests.

              -1 patch. The patch command could not apply the patch.

          Console output: https://builds.apache.org/job/PreCommit-HBASE-Build/959//console

          This message is automatically generated. ]
          Ted Yu made changes -
          Attachment HBASE-5371_v3.patch [ 12514516 ]
          Ted Yu made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Ted Yu made changes -
          Attachment HBASE-5371_v2.patch [ 12514227 ]
          Enis Soztutar made changes -
          Link This issue blocks HCATALOG-245 [ HCATALOG-245 ]
          Enis Soztutar made changes -
          Field Original Value New Value
          Link This issue is blocked by HBASE-5358 [ HBASE-5358 ]
          Enis Soztutar created issue -

            People

            • Assignee:
              Enis Soztutar
              Reporter:
              Enis Soztutar
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development