[PHOENIX-3652] Users who do not have global access to hbase cluster can't connect to phoenix

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.8.0
• Fix Version/s: 4.10.0, 4.8.3
• Assignee: Ankit Singhal
• Reporter: Kang Yuan
• Created: 03/Feb/17 11:36
• Updated: 30/Mar/17 19:15
• Resolved: 06/Feb/17 15:02

Description

when I upgrade the namespaceMapping feature.I found some one can't connect to cluster.when error echo:"Caused by: org.apache.hadoop.hbase.security.AccessDeniedException: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'xxx' (global, action=ADMIN)"

I foud the reason "at org.apache.phoenix.query.ConnectionQueryServicesImpl$13.ensureSystemTablesUpgraded(ConnectionQueryServicesImpl.java:2603)
at org.apache.phoenix.query.ConnectionQueryServicesImpl$13.call(ConnectionQueryServicesImpl.java:2337)"

each time new client connect to server where ensureSystemTableUpgraded who list empty "SYSTEM.*" table when error occur

Issue Links

• relates to: PHOENIX-3756 Users lacking ADMIN on 'SYSTEM' HBase namespace can't connect to Phoenix