[ 
https://issues.apache.org/jira/browse/HBASE-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13284807#comment-13284807
 ] 

Laxman commented on HBASE-6096:
-------------------------------

Please validate my understanding and correct me.

1) Derived from HBASE-6061.
Table Owner + Table CREATE = Table ADMIN

2) Table ADMIN should be able to perform any operation on a table. (inline with 
GLOBAL ADMIN)
Table ADMIN = CREATE + READ + WRITE + ADMIN PERMISSIONS

ADMIN PERMISSIONS - Includes 

ADMIN should be able to perform operations like GET, SCAN, PUT and DELETE 
without explicit "READ" and "WRITE" permissions.

3) Table WRITE permission is NOT an inclusion of Table READ.

i.e., having WRITE permission alone indicates User is NOT authorized to do READ 
operations like GET/SCAN.


                
> AccessController v2
> -------------------
>
>                 Key: HBASE-6096
>                 URL: https://issues.apache.org/jira/browse/HBASE-6096
>             Project: HBase
>          Issue Type: Umbrella
>          Components: security
>    Affects Versions: 0.96.0, 0.94.1
>            Reporter: Andrew Purtell
>
> Umbrella issue for iteration on the initial AccessController drop.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to