[ https://issues.apache.org/jira/browse/HBASE-12622?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14233905#comment-14233905 ]
Srikanth Srungarapu commented on HBASE-12622: --------------------------------------------- My two cents. Going by the discussion in HBASE-9206, specifically bq. 'A' on the namespace does not grant admin privilege - let's document this exception clearly. my understanding is there isn't any support added for namespace admin, so adding support for requireGlobalPermission(ns) is non-trivial/major change, as it needs to be implemented from scratch. Maybe, we can move forward with the global checks for now? > user_permission should require global admin to display global and ns > permissions > -------------------------------------------------------------------------------- > > Key: HBASE-12622 > URL: https://issues.apache.org/jira/browse/HBASE-12622 > Project: HBase > Issue Type: Bug > Components: security > Affects Versions: 2.0.0, 0.98.8, 0.99.2 > Reporter: Matteo Bertozzi > Assignee: Matteo Bertozzi > Fix For: 1.0.0, 2.0.0, 0.98.9 > > Attachments: HBASE-12622-v0.patch > > > user_permission check the user permission only on the table level (requiring > at least a table-level admin) > global and namespace permission listing is done without checking anything. > but only a global admins should be able to perform this operations. -- This message was sent by Atlassian JIRA (v6.3.4#6332)