[ 
https://issues.apache.org/jira/browse/HBASE-7066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13488198#comment-13488198
 ] 

Francis Liu commented on HBASE-7066:
------------------------------------

Stack, IMHO it really depends on what the coprocessor wants. In the context of 
security, it'd be safer to err on the side of caution if the security module is 
unable to authorize a request, as this behavior may be exploited by a malicious 
user.

In general though we probably need a means for the coprocessor to communicate 
what can and can't be ignored.




                
> Some HMaster coprocessor exceptions are being swallowed in try catch blocks
> ---------------------------------------------------------------------------
>
>                 Key: HBASE-7066
>                 URL: https://issues.apache.org/jira/browse/HBASE-7066
>             Project: HBase
>          Issue Type: Bug
>          Components: Coprocessors, security
>    Affects Versions: 0.94.2, 0.96.0
>            Reporter: Francis Liu
>            Assignee: Francis Liu
>            Priority: Critical
>         Attachments: HBASE-7066_94.patch, HBASE-7066_trunk.patch, 
> HBASE-7066_trunk.patch
>
>
> This is causing HMaster.shutdown() and HMaster.stopMaster() to succeed even 
> when an AccessDeniedException is thrown.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to