[
https://issues.apache.org/jira/browse/HBASE-12511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14252898#comment-14252898
]
Huaiyu Zhu commented on HBASE-12511:
------------------------------------
Updated patch in v8
1. raised permission to global for: grant/revoke/createNS/modifyNS/deleteNS
2. CreateTable still requires NS 'C' or global 'C'
3. some recent patches changed behavior of getUserPermission,
GetNamespaceDescriptor, ListNamespaceDescriptors. Those newly added behaviors
are kept in this patch, but we might want to revisit them later.
Related jiras:
HBASE-12674 Add permission check to getNamespaceDescriptor()
HBASE-12663 unify getTableDescriptors() and listTableDescriptorsByNamespace()
preGetNamespaceDescriptor/postListNamespaceDescriptors. This is a behavior
change instead of a bug fix. The original design requires no permissions. Need
more discussions so that we don't surprise the users.
HBASE-12622 user_permission should require global admin to display global and
ns permissions
Also behaviors change. IMO, this is fine.
HBASE-12634, HBASE-12098 changed behaviors of namespace
delete/modify/grant/revoke .... But only CreateTable need to be fixed, others
are desired correct behaviors.
> namespace permissions - add support from table creation privilege in a
> namespace 'C'
> ------------------------------------------------------------------------------------
>
> Key: HBASE-12511
> URL: https://issues.apache.org/jira/browse/HBASE-12511
> Project: HBase
> Issue Type: Sub-task
> Reporter: Francis Liu
> Assignee: Huaiyu Zhu
> Priority: Blocker
> Fix For: 1.0.0
>
> Attachments: HBASE-12511.patch, HBASE-12511.patch, HBASE-12511.patch,
> HBASE-12511.patch, hbase-12511_v5.patch, hbase-12511_v6.patch,
> hbase-12511_v7.patch, hbase-12511_v8.patch
>
>
> As discussed in namespace permission Jira. A user granted a 'C' on a
> namespace enables a user to create tables within the namespace. 'C' on a
> namespace does not enable a user to create/drop the namespace.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
