virajjasani commented on pull request #2851:
URL: https://github.com/apache/hbase/pull/2851#issuecomment-756747789


   AccessController has this:
   ```
     @Override
     public void preDisableTable(ObserverContext<MasterCoprocessorEnvironment> 
c, TableName tableName)
         throws IOException {
       if (Bytes.equals(tableName.getName(), 
PermissionStorage.ACL_GLOBAL_NAME)) {
         // We have to unconditionally disallow disable of the ACL table when 
we are installed,
         // even if not enforcing authorizations. We are still allowing grants 
and revocations,
         // checking permissions and logging audit messages, etc. If the ACL 
table is not
         // available we will fail random actions all over the place.
         throw new AccessDeniedException("Not allowed to disable " + 
PermissionStorage.ACL_TABLE_NAME
             + " table with AccessController installed");
       }
       requirePermission(c, "disableTable",
           tableName, null, null, Action.ADMIN, Action.CREATE);
     }
   ```
   Which is covered by 
   ```
   getMaster().getMasterCoprocessorHost().preDisableTable(tableName);
   ```
   from HMaster


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to