Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-6096 AccessController v2
  3. HBASE-7331

Add access control for region open and close, row locking, and stopping the regionserver

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.94.3, 0.95.2
    • Fix Version/s: 0.94.4, 0.95.0
    • Component/s: regionserver, security
    • Labels:
      None
    • Hadoop Flags:
      Reviewed
    • Tags:
      0.96notable

      Description

      The following APIs in HRegionServer are either missing hooks to coprocessor or the hooks are not implemented in the AccessController class for security. As a result any unauthorized user can:

      1.Open a region
      2. Close a region
      3. Stop region server
      4. Lock a row
      5. Unlock a row.

        Attachments

        1. HBASE-7331_94_02.patch
          35 kB
          Vandana Ayyalasomayajula
        2. HBASE-7331_94.patch
          35 kB
          Vandana Ayyalasomayajula
        3. HBASE-7331_trunk_02.patch
          30 kB
          Vandana Ayyalasomayajula
        4. HBASE-7331_trunk.patch
          30 kB
          Vandana Ayyalasomayajula
        5. HBASE-7331-0.94-v3.patch
          36 kB
          Andrew Kyle Purtell

          Issue Links

          relates to

          Sub-task - The sub-task of the issue HBASE-6101 Ensure Observers cover all relevant RPC and lifecycle code paths

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                avandana Vandana Ayyalasomayajula
                Reporter:
                avandana Vandana Ayyalasomayajula
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: