[ https://issues.apache.org/jira/browse/HBASE-12723?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Srikanth Srungarapu updated HBASE-12723: ---------------------------------------- Attachment: HBASE-12723_v3.patch Thanks [~ashish singhi] for taking a look. Addressed your concern. Also added checks that went in HBASE-12916. [~enis] Hope this is the format you are looking for. Can you please take a look when you get a chance? It would be good to get this in as the existing documentation on acl matrix has gone state. > Update ACL matrix to reflect reality > ------------------------------------ > > Key: HBASE-12723 > URL: https://issues.apache.org/jira/browse/HBASE-12723 > Project: HBase > Issue Type: Bug > Reporter: Enis Soztutar > Assignee: Srikanth Srungarapu > Fix For: 2.0.0, 1.0.1, 1.1.0 > > Attachments: HBASE-12723.patch, HBASE-12723_v2.patch, > HBASE-12723_v3.patch, book.html > > > The ACL matrix in the book should be updated with the recent changes. > https://hbase.apache.org/book/appendix_acl_matrix.html > Also the format is not optimal. There is a hierarchy relation between scopes > (GLOBAL > NS > TABLE), but not so much between Permissions (A,C,R) > Some things to do: > - {{Minimum Permission}} column does not make sense. We should replace it. > - Add information about superuser > - grant is a multi level thing. Required permissions depend on the scope. > - See HBASE-12511 and others changed some of the permissions > What I would like to see at the end is something like: > {code} > createNamespace : superuser | global(A) > deleteNamespace : superuser | global(A) | NS(A) > modifyNamespace : superuser | global(A) | NS(A) > getNamespaceDescriptor : superuser | global(A) | NS(A) > listNamespaces : All access* > createTable : superuser | global(C) | NS(C) > grant > NS Perm : superuser | global(A) | NS(A) > Table Perm : ... > revoke > NS Perm : superuser | global(A) | NS(A) > Table Perm : ... > getPerms > NS perm : superuser | global(A) | NS(A) > Table Perm : ... > {code} > See HBASE-12511. -- This message was sent by Atlassian JIRA (v6.3.4#6332)