[
https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14252699#comment-14252699
]
Huaiyu Zhu commented on HBASE-12511:
------------------------------------
{quote}preDeleteNamespace, preModifyNamespace - requires global permission,
namespace permission does not allow namespace DDL permission privilege as
mentioned in HBASE-8015.{quote}
{quote}{quote}Except for the special case for 'C'. Namespace privileges is
mainly used as another level of hierarchy (privileges to be inherited by
tables). ie We might want user to have C on namespace so he can create tables
but we don't want that user to be able to drop the namespace.{quote}Sounds
good.{quote}
It seems we should allow global A to delete/modify namespace. However, in the
latest patch we have requireGlobalOrNamespacePermission.
[~enis] Can you confirm the behavior again. Thx.
> namespace permissions - add support from table creation privilege in a
> namespace 'C'
> ------------------------------------------------------------------------------------
>
> Key: HBASE-12511
> URL: https://issues.apache.org/jira/browse/HBASE-12511
> Project: HBase
> Issue Type: Sub-task
> Reporter: Francis Liu
> Assignee: Huaiyu Zhu
> Priority: Blocker
> Fix For: 1.0.0
>
> Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch,
> HBASE-12511.patch, hbase-12511_v5.patch, hbase-12511_v6.patch,
> hbase-12511_v7.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a
> namespace enables a user to create tables within the namespace. 'C' on a
> namespace does not enable a user to create/drop the namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
