[ 
https://issues.apache.org/jira/browse/HBASE-12301?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14178821#comment-14178821
 ] 

Srikanth Srungarapu commented on HBASE-12301:
---------------------------------------------

Patch looks good to me. Is the change from 
AccessControlConstants.OP_ATTRIBUTE_ACL to "acl" intentional?
{code}
+  public static final TableName ACL_TABLE_NAME =
+      TableName.valueOf(NamespaceDescriptor.SYSTEM_NAMESPACE_NAME_STR, "acl");
 
   private static HTable getAclTable(Configuration conf) throws IOException {
-    TableName aclTableName =
-        TableName.valueOf(NamespaceDescriptor.SYSTEM_NAMESPACE_NAME_STR,
-            AccessControlConstants.OP_ATTRIBUTE_ACL);
{code}

> user_permission command does not show global permissions
> --------------------------------------------------------
>
>                 Key: HBASE-12301
>                 URL: https://issues.apache.org/jira/browse/HBASE-12301
>             Project: HBase
>          Issue Type: Bug
>          Components: security, shell
>    Affects Versions: 0.98.4, 2.0.0
>            Reporter: Jerry He
>            Assignee: Matteo Bertozzi
>         Attachments: HBASE-12301-v0.patch
>
>
> It seems that since 0,98 or later, the shell command does not show global 
> permission anymore, even requested by user with the right privilege.
> {code}
> hbase(main):004:0> user_permission
> User                            Table,Family,Qualifier:Permission
>  hbase                          default,table1,,: [Permission: 
> actions=READ,WRITE,EXEC,CREATE,ADMIN]
>  user2                          default,table1,,: [Permission: 
> actions=READ,WRITE]
>  hbase                          default,table2,,: [Permission: 
> actions=READ,WRITE,EXEC,CREATE,ADMIN]
>  user2                          default,table2,,: [Permission: 
> actions=READ,WRITE]
> {code}
> I recall in the older versions, global permissions were shown as permissions 
> on the hbase:acl table.
> Anyway we need a way to show the global permissions as part of 
> user_permission request.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to