why “RXC” is needed the minimum?

在 2017年2月17日,09:15,Sergey Soldatov 
<[email protected]<mailto:[email protected]>> 写道:

Unfortunately some versions of Phoenix client is using HBase API (such as 
getHTableDescriptor) that requires HBase CREATE/ADMIN permissions on system 
tables. Moreover the upgrade path is trying to create system tables to check 
whether system requires an upgrade and that may fail with permission exception 
(that's your case).  Mostly those problems should be gone in 4.9 where upgrade 
is the manual operation. So, no easy way to avoid this problem without patching 
the sources (patch itself is obvious though).

Thanks,
Sergey

On Thu, Feb 16, 2017 at 2:03 AM, Pedro Boado 
<[email protected]<mailto:[email protected]>> wrote:
Hi all,

I have a quick question. We are still running on Phoenix 4.5 (I know, it's not 
my fault) and we're trying to setup a read only user on a phoenix table. The 
minimum set of permissions to get access through sqlline is

grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'

I was wondering whether there is a way for avoiding the need of the CREATE 
permission on catalog tables.

Cheers,
Pedro.



Reply via email to