[HBASE-6209] ACL Corrections for AccessControllerProtocol apis

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.94.0, 0.94.1, 0.95.2
• Fix Version/s: 0.94.1, 0.95.0
• Component/s: security
• Labels: acl security
• Hadoop Flags: Reviewed
• Assignee: Laxman
• Reporter: Laxman
• Created: 14/Jun/12 09:18
• Updated: 26/Feb/13 08:16
• Resolved: 20/Jun/12 22:30

Description

APIs provided in AccessController are authorized against global-admin permissions. Instead we need to check for table-admin level permissions.

Edit: Append operation also has no authorization check. We can update it together.

Issue Links

• relates to: HBASE-5372 Table mutation operations should check table level rights, not global rights