[ 
https://issues.apache.org/jira/browse/HBASE-6092?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13293379#comment-13293379
 ] 

Laxman commented on HBASE-6092:
-------------------------------

Thanks for review Andy.

bq. Please update the comments in the tests you added
Copy & paste error. My mistake. Sorry.

Also, one more observation. We should throw back IOException from 
RegionCoprocessorHost from pre/post split/flush/compact methods using:

{code}
org.apache.hadoop.hbase.coprocessor.CoprocessorHost.handleCoprocessorThrowable(CoprocessorEnvironment,
 Throwable)
{code}

bq. -1 core tests.
Verified these testcases locally. And not relevant to the patch.

bq. -1 findbugs.
Verified the findbugs report. This patch does not introduce any findbugs.
                
> Authorize flush, split, compact operations in AccessController
> --------------------------------------------------------------
>
>                 Key: HBASE-6092
>                 URL: https://issues.apache.org/jira/browse/HBASE-6092
>             Project: HBase
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.94.0, 0.96.0, 0.94.1
>            Reporter: Laxman
>            Assignee: Laxman
>              Labels: acl, security
>             Fix For: 0.96.0, 0.94.1
>
>         Attachments: HBASE-6092.patch
>
>
> Currently, flush, split and compaction are not checked for authorization in 
> AccessController. With the current implementation any unauthorized client can 
> trigger these operations on a table.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to