Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-6096 AccessController v2
  3. HBASE-7331

Add access control for region open and close, row locking, and stopping the regionserver

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.94.3, 0.95.2
    • 0.94.4, 0.95.0
    • regionserver, security
    • None
    • Reviewed
    • 0.96notable

    Description

      The following APIs in HRegionServer are either missing hooks to coprocessor or the hooks are not implemented in the AccessController class for security. As a result any unauthorized user can:

      1.Open a region
      2. Close a region
      3. Stop region server
      4. Lock a row
      5. Unlock a row.

      Attachments

        1. HBASE-7331-0.94-v3.patch
          36 kB
          Andrew Kyle Purtell
        2. HBASE-7331_94_02.patch
          35 kB
          Vandana Ayyalasomayajula
        3. HBASE-7331_trunk_02.patch
          30 kB
          Vandana Ayyalasomayajula
        4. HBASE-7331_94.patch
          35 kB
          Vandana Ayyalasomayajula
        5. HBASE-7331_trunk.patch
          30 kB
          Vandana Ayyalasomayajula

        Issue Links

          relates to

          Sub-task - The sub-task of the issue HBASE-6101 Ensure Observers cover all relevant RPC and lifecycle code paths

          • Major - Major loss of function.
          • Closed

          Activity

            People

              avandana Vandana Ayyalasomayajula
              avandana Vandana Ayyalasomayajula
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: