Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-7330

Security hooks missing in region server and master APIs.

    Details

    • Type: Umbrella
    • Status: Resolved
    • Priority: Major
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: master, regionserver, security
    • Labels:
      None

      Description

      Some of the APIs in Master and Region server are missing hooks to the coprocessors. So even if security is enabled, an unauthorized user can perform certain operations.

      The following is the list of operations:

      1. HMaster.offline()
      2. HMaster.getHTableDescriptors()
      3. HMaster.getHTableDescriptors(List<String> tableNames)
      4. HRegionServer.getRegionInfo()
      5. HRegionInterface.getLastFlushTime()
      6. HRegionInterface.getStoreFileList(byte[] regionName, byte[] columnFamily)
      7. HRegionInterface.getStoreFileList(byte[] regionName, byte[][] columnFamilies)
      8. HRegionInterface.getStoreFileList(byte[] regionName
      9. HRegionInterface.lockRow(final byte [] regionName, final byte [] row)
      10. HRegionInterface.unlockRow(final byte [] regionName, final long lockId)
      11. HRegionInterface.getOnlineRegions()
      12. HRegionInterface.getHServerInfo()
      13. HRegionInterface.replicateLogEntries(HLog.Entry[] entries)
      14. HRegionInterface.stop()
      15. HRegionInterface.OpenRegions()
      16. HRegionInterface.closeRegion()

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                avandana Vandana Ayyalasomayajula
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: