[HBASE-7367] Snapshot coprocessor and ACL security

• Type: Sub-task
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 0.95.0
• Component/s: Client, master, regionserver, snapshots, Zookeeper
• Hadoop Flags: Reviewed
• Release Note: This adds pre and post snapshot request hooks to the master observer coprocessor as well as code to the security coproc that only allows ADMIN users to take, clone or restore snapshots.
• Assignee: Matteo Bertozzi
• Reporter: Matteo Bertozzi
• Created: 17/Dec/12 16:56
• Updated: 23/Sep/13 18:30
• Resolved: 18/Dec/12 21:54

Description

Currently snapshot don't care about ACL...
and in the first draft snapshots should be disabled if the ACL coprocessor is enabled.

After the first step, we can discuss how to handle the snapshot/restore/clone.
Is saving and restoring the acl related rights, the right way? maybe after 3 months we don't want to give the access the guys listed in the old acl...