[HBASE-5372] Table mutation operations should check table level rights, not global rights

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.94.0, 0.94.1, 0.95.2
• Fix Version/s: 0.94.1, 0.95.0
• Component/s: security
• Labels: security
• Hadoop Flags: Reviewed
• Tags: Huawei
• Assignee: Laxman
• Reporter: Enis Soztutar
• Created: 09/Feb/12 23:16
• Updated: 26/Feb/13 08:15
• Resolved: 09/Jun/12 18:16

Description

drop/modify/disable/enable etc table operations should not check for global CREATE/ADMIN rights, but table CREATE/ADMIN rights. Since we check for global permissions first for table permissions, configuring table access using global permissions will continue to work.

Issue Links

• is duplicated by: HBASE-6086 Admin operations on a table should be authorized against table permissions instead of global permissions.
• is related to: HBASE-6209 ACL Corrections for AccessControllerProtocol apis