You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@phoenix.apache.org by "Rajeshbabu Chintaguntla (Jira)" <ji...@apache.org> on 2020/06/02 11:08:00 UTC

[jira] [Commented] (PHOENIX-5905) Reset user to hbase by changing rpc context before getting user permissions on access controller service

    [ https://issues.apache.org/jira/browse/PHOENIX-5905?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17123645#comment-17123645 ] 

Rajeshbabu Chintaguntla commented on PHOENIX-5905:
--------------------------------------------------

[~stoty] [~elserj]
creating new user permissions list inside getUserDefinedPermissions is masking the user permissions list passed to the method and it's always returning empty results for custom access controller service(PHOENIX-5700). so removed it in the addendum2 patch and also added the test cases(PHOENIX-5908) verify the same with custom access controllers. Things are fine now. Please take a look at the addendum2.

> Reset user to hbase by changing rpc context before getting user permissions on access controller service 
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: PHOENIX-5905
>                 URL: https://issues.apache.org/jira/browse/PHOENIX-5905
>             Project: Phoenix
>          Issue Type: Bug
>            Reporter: Rajeshbabu Chintaguntla
>            Assignee: Rajeshbabu Chintaguntla
>            Priority: Major
>             Fix For: 5.1.0, 4.16.0
>
>         Attachments: PHOENIX-5905.patch, PHOENIX-5905_addendum.patch, PHOENIX-5905_addendum2.patch
>
>
> Currently we are calling getUserPermissions with hbase user directly on access controller service which is not a rpc call. If we don't reset user system user will be considered and might expect extra privileges  to return the user  permissions.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)