[
https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14236499#comment-14236499
]
Enis Soztutar commented on HBASE-12511:
---------------------------------------
bq. The current code requires global permission 'CREATE'. However, there is a
bug in 'requireGlobalPermission' which checks NS permissions
It seems serious, but I lack the history for this. Maybe [~apurtell] can shine
some light. I thought it is intentional.
It seems that we should really modify the TestAccessController to test ALL
combinations in https://hbase.apache.org/book/appendix_acl_matrix.html. Right
now that test does not do any NS checks AFAIK.
> namespace permissions - add support from table creation privilege in a
> namespace 'C'
> ------------------------------------------------------------------------------------
>
> Key: HBASE-12511
> URL: https://issues.apache.org/jira/browse/HBASE-12511
> Project: HBase
> Issue Type: Sub-task
> Reporter: Francis Liu
> Assignee: Huaiyu Zhu
> Attachments: HBASE-12511.patch, HBASE-12511.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a
> namespace enables a user to create tables within the namespace. 'C' on a
> namespace does not enable a user to create/drop the namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
