[jira] [Commented] (HBASE-12511) namespace permissions - add support from table creation privilege in a namespace 'C'

[Srikanth Srungarapu (JIRA)]

    [ 
https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14252355#comment-14252355
 ] 

Srikanth Srungarapu commented on HBASE-12511:
---------------------------------------------

Patch looks great. Just a minor concern.
bq. modifyNamespace        : superuser | global(A) | NS(A)
In the code for preModifyNamespace, we have 
{code}
@Override
  public void preModifyNamespace(ObserverContext<MasterCoprocessorEnvironment> 
ctx,
      NamespaceDescriptor ns) throws IOException {
    requireGlobalPermission("modifyNamespace", Action.ADMIN, ns.getName());
  }
{code}
Looks like only global admin is eligible for performing this action. Similar is 
the case with deleteNamespace.

> namespace permissions - add support from table creation privilege in a 
> namespace 'C'
> ------------------------------------------------------------------------------------
>
>                 Key: HBASE-12511
>                 URL: https://issues.apache.org/jira/browse/HBASE-12511
>             Project: HBase
>          Issue Type: Sub-task
>            Reporter: Francis Liu
>            Assignee: Huaiyu Zhu
>             Fix For: 1.1.0
>
>         Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch, 
> HBASE-12511.patch, hbase-12511_v5.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a 
> namespace enables a user to create tables within the namespace. 'C' on a 
> namespace does not enable a user to create/drop the namespace.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)