[ 
https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14243555#comment-14243555
 ] 

Srikanth Srungarapu commented on HBASE-12511:
---------------------------------------------

In the following methods, requireGlobalPermission is being used.
* getUserPermissions
* grant (L#2040)
* postListNamespaceDescriptors
* preDeleteNamespace
* preGetNamespaceDescriptor
* preModifyNamespace
* revoke (Line#2091)
I think using requirePermission make more sense in these cases because admin 
permission on namespace should also be able to get the permissions going, not 
just global permissions. Thoughts?

> namespace permissions - add support from table creation privilege in a 
> namespace 'C'
> ------------------------------------------------------------------------------------
>
>                 Key: HBASE-12511
>                 URL: https://issues.apache.org/jira/browse/HBASE-12511
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Francis Liu
>            Assignee: Huaiyu Zhu
>         Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a 
> namespace enables a user to create tables within the namespace. 'C' on a 
> namespace does not enable a user to create/drop the namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to