[jira] [Updated] (HBASE-23896) Snapshot owner cannot delete snapshot when ACL is enabled and Kerberos is not enabled

["Nick Dimiduk (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-23896?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nick Dimiduk updated HBASE-23896:
---------------------------------
    Fix Version/s:     (was: 2.4.0)

> Snapshot owner cannot delete snapshot when ACL is enabled and Kerberos is not enabled
> -------------------------------------------------------------------------------------
>
>                 Key: HBASE-23896
>                 URL: https://issues.apache.org/jira/browse/HBASE-23896
>             Project: HBase
>          Issue Type: Task
>    Affects Versions: 3.0.0-alpha-1, 2.2.3
>            Reporter: Guangxu Cheng
>            Assignee: Guangxu Cheng
>            Priority: Major
>             Fix For: 3.0.0-alpha-1, 2.3.0, 2.2.5
>
>         Attachments: HBASE-23896-branch-2.2-addendum.patch
>
>
> When ACL is enabled and Kerberos is not enabled, the snapshot owner cannot delete the snapshot. This is because the owner of the snapshot cannot be taken during permission verification. By investigation, found that only after HBase has enabled security authentication, the owner will be set when doing snapshot. 
> SnapshotManager#takeSnapshotInternal
> {code:title=SnapshotManager.java|borderStyle=solid}
> RpcServer.getRequestUser().ifPresent(user -> {
>   if (User.isHBaseSecurityEnabled(master.getConfiguration())) {
>     builder.setOwner(user.getShortName());
>   }
> });
> {code}
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)