[ https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14252355#comment-14252355 ]
Srikanth Srungarapu commented on HBASE-12511: --------------------------------------------- Patch looks great. Just a minor concern. bq. modifyNamespace : superuser | global(A) | NS(A) In the code for preModifyNamespace, we have {code} @Override public void preModifyNamespace(ObserverContext<MasterCoprocessorEnvironment> ctx, NamespaceDescriptor ns) throws IOException { requireGlobalPermission("modifyNamespace", Action.ADMIN, ns.getName()); } {code} Looks like only global admin is eligible for performing this action. Similar is the case with deleteNamespace. > namespace permissions - add support from table creation privilege in a > namespace 'C' > ------------------------------------------------------------------------------------ > > Key: HBASE-12511 > URL: https://issues.apache.org/jira/browse/HBASE-12511 > Project: HBase > Issue Type: Sub-task > Reporter: Francis Liu > Assignee: Huaiyu Zhu > Fix For: 1.1.0 > > Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch, > HBASE-12511.patch, hbase-12511_v5.patch > > > As discussed in namespace permission Jira. A user granted a 'C' on a > namespace enables a user to create tables within the namespace. 'C' on a > namespace does not enable a user to create/drop the namespace. -- This message was sent by Atlassian JIRA (v6.3.4#6332)