[
https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14251298#comment-14251298
]
Francis Liu commented on HBASE-12511:
-------------------------------------
Yeah lets try and get it in. It'd be better not to surprise users. If already
captured I'd like to follow what was agreed up in HBASE-9206.
{quote}
Seems fine till we get L permission. Can we re-use X in any way? Unix dir
permission uses X for dir listing.
{quote}
X is for coprocessor (at least in 98). The overload of privileges would be
confusing?
{quote}
So we have to fix this case, because having ADMIN on NS will allow you to
delete the NS? Delete table will work if you have C on table, don't we want the
same?
{quote}
Except for the special case for 'C'. Namespace privileges is mainly used as
another level of hierarchy (privileges to be inherited by tables). ie We might
want user to have C on namespace so he can create tables but we don't want that
user to be able to drop the namespace. Same goes with the other privileges.
Another use case was to prevent users from altering namespace configuration (ie
quota).
> namespace permissions - add support from table creation privilege in a
> namespace 'C'
> ------------------------------------------------------------------------------------
>
> Key: HBASE-12511
> URL: https://issues.apache.org/jira/browse/HBASE-12511
> Project: HBase
> Issue Type: Sub-task
> Reporter: Francis Liu
> Assignee: Huaiyu Zhu
> Fix For: 1.1.0
>
> Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a
> namespace enables a user to create tables within the namespace. 'C' on a
> namespace does not enable a user to create/drop the namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
