[ 
https://issues.apache.org/jira/browse/HBASE-12916?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Liu Shaohui updated HBASE-12916:
--------------------------------
    Status: Patch Available  (was: Open)

> No access control for replicating WAL entries
> ---------------------------------------------
>
>                 Key: HBASE-12916
>                 URL: https://issues.apache.org/jira/browse/HBASE-12916
>             Project: HBase
>          Issue Type: Bug
>          Components: Replication
>    Affects Versions: 0.94.26, 2.0.0, 0.98.12
>            Reporter: Liu Shaohui
>            Assignee: Liu Shaohui
>         Attachments: HBASE-12916-v1.diff
>
>
> Currently, there is no access control for replicating WAL entries in secure 
> HBase cluster. Any authenticated user can write any data they want to any 
> table of a secure cluster by using the replication api.
> Simple solution is  to add permission check before replicating WAL entries. 
> And only user with global write permission can replicate WAL entries to this 
> cluster.
> Another option is adding "Replication" action in hbase and only user with 
> "Replication" permission can replicate WAL entries to this cluster?
> [~apurtell] 
> What's your suggestion? Thanks



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to