HBase
  1. HBase
  2. HBASE-7330

Security hooks missing in region server and master APIs.

    Details

    • Type: Umbrella Umbrella
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: master, regionserver, security
    • Labels:
      None

      Description

      Some of the APIs in Master and Region server are missing hooks to the coprocessors. So even if security is enabled, an unauthorized user can perform certain operations.

      The following is the list of operations:

      1. HMaster.offline()
      2. HMaster.getHTableDescriptors()
      3. HMaster.getHTableDescriptors(List<String> tableNames)
      4. HRegionServer.getRegionInfo()
      5. HRegionInterface.getLastFlushTime()
      6. HRegionInterface.getStoreFileList(byte[] regionName, byte[] columnFamily)
      7. HRegionInterface.getStoreFileList(byte[] regionName, byte[][] columnFamilies)
      8. HRegionInterface.getStoreFileList(byte[] regionName
      9. HRegionInterface.lockRow(final byte [] regionName, final byte [] row)
      10. HRegionInterface.unlockRow(final byte [] regionName, final long lockId)
      11. HRegionInterface.getOnlineRegions()
      12. HRegionInterface.getHServerInfo()
      13. HRegionInterface.replicateLogEntries(HLog.Entry[] entries)
      14. HRegionInterface.stop()
      15. HRegionInterface.OpenRegions()
      16. HRegionInterface.closeRegion()

        Issue Links

          Activity

          No work has yet been logged on this issue.

            People

            • Assignee:
              Unassigned
              Reporter:
              Vandana Ayyalasomayajula
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development