[ 
https://issues.apache.org/jira/browse/HBASE-10619?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13916740#comment-13916740
 ] 

Andrew Purtell commented on HBASE-10619:
----------------------------------------

The v3 patch isn't quite right. We should not universally reject requests. The 
superuser is allowed to do anything everywhere else. The tests should be 
isSuperUser(User.getCurrentUser()) || <condition>. 

Since we have this concept of superuser, i.e. "root", it has to be consistent. 
An almost-superuser is difficult to reason about.

> Don't allow user to disable/drop NS table
> -----------------------------------------
>
>                 Key: HBASE-10619
>                 URL: https://issues.apache.org/jira/browse/HBASE-10619
>             Project: HBase
>          Issue Type: Bug
>            Reporter: Anoop Sam John
>            Assignee: Anoop Sam John
>         Attachments: HBASE-10619.patch, HBASE-10619_V2.patch, 
> HBASE-10619_V3.patch
>
>
> We should treat NS table just like META table, which is having checks so that 
> user can not disable/drop.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to