[
https://issues.apache.org/jira/browse/HBASE-10226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13856454#comment-13856454
]
stack commented on HBASE-10226:
-------------------------------
Patch looks good to me. I'd commit to 0.96 because it a bug fix. i tried it
and got this:
{code}
Failed tests:
testNamespaceUserGrant(org.apache.hadoop.hbase.security.access.TestAccessController):
Expected action to pass for user 'nouser' but was denied
Tests run: 40, Failures: 1, Errors: 0, Skipped: 0
{code}
You see that before [~apurtell]? Thanks.
> [AccessController] Namespace grants not always checked
> ------------------------------------------------------
>
> Key: HBASE-10226
> URL: https://issues.apache.org/jira/browse/HBASE-10226
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.98.0, 0.96.2, 0.99.0
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Priority: Critical
> Fix For: 0.98.0, 0.99.0
>
> Attachments: 10226-0.96.patch, 10226-0.96.patch, 10226-0.96.patch,
> 10226.patch, 10226.patch, 10226.patch
>
>
> Namespace grants for a user are supposed to supercede table level
> permissions, a middle tier between table grants and global grants. We are not
> always checking.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
