[jira] [Commented] (HBASE-12622) user_permission should require global admin to display global and ns permissions

["Anoop Sam John (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HBASE-12622?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14232997#comment-14232997 ] 

Anoop Sam John commented on HBASE-12622:
----------------------------------------

bq.requireGlobalPermission("userPermissions", Action.ADMIN, namespace);
Pls check whether this method really checks for the ns level permission given for the user. I have doubt.

> user_permission should require global admin to display global and ns permissions
> --------------------------------------------------------------------------------
>
>                 Key: HBASE-12622
>                 URL: https://issues.apache.org/jira/browse/HBASE-12622
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.0.0, 0.98.8, 0.99.2
>            Reporter: Matteo Bertozzi
>            Assignee: Matteo Bertozzi
>             Fix For: 1.0.0, 2.0.0, 0.98.9
>
>         Attachments: HBASE-12622-v0.patch
>
>
> user_permission check the user permission only on the table level (requiring at least a table-level admin)
> global and namespace permission listing is done without checking anything.
> but only a global admins should be able to perform this operations.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)