Details
-
Sub-task
-
Status: Closed
-
Major
-
Resolution: Fixed
-
0.94.3, 0.95.2
-
None
-
Reviewed
-
0.96notable
Description
The following APIs in HRegionServer are either missing hooks to coprocessor or the hooks are not implemented in the AccessController class for security. As a result any unauthorized user can:
1.Open a region
2. Close a region
3. Stop region server
4. Lock a row
5. Unlock a row.
Attachments
Attachments
Issue Links
- relates to
-
HBASE-6101 Ensure Observers cover all relevant RPC and lifecycle code paths
- Closed