[jira] [Comment Edited] (HBASE-7367) Snapshot coprocessor and ACL security

["Andrew Purtell (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HBASE-7367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13534258#comment-13534258 ] 

Andrew Purtell edited comment on HBASE-7367 at 12/17/12 8:17 PM:
-----------------------------------------------------------------

Points raised by Matteo and Jon on RB should definitely be discussed here. 

I understand the goal is to punt, initially. Just throwing an ADE is punting too early.

Checking for GLOBAL ADMIN privilege and allowing snapshots if the (super)user has this priv, otherwise throwing an ADE, is more reasonable. This means security won't get in the way of snapshots but won't add anything either.

It assumes the superuser knows all, and knows that ACLs will have to be reconstructed on a restored table. The default policy is deny so the restored or cloned table cannot be read by who you want, not that data will suddenly leak.
                
      was (Author: apurtell):
    Points raised by Matteo and Jon on RB should definitely be discussed here. 

I understand the goal is to punt, initially. Just throwing an ADE is punting too early.

Checking for GLOBAL ADMIN privilege and allowing snapshots is more reasonable. This means security won't get in the way of snapshots but won't add anything either.

It assumes the superuser knows all, and knows that ACLs will have to be reconstructed on a restored table. The default policy is deny so the restored or cloned table cannot be read by who you want, not that data will suddenly leak.
                  
> Snapshot coprocessor and ACL security
> -------------------------------------
>
>                 Key: HBASE-7367
>                 URL: https://issues.apache.org/jira/browse/HBASE-7367
>             Project: HBase
>          Issue Type: Sub-task
>          Components: Client, master, regionserver, snapshots, Zookeeper
>            Reporter: Matteo Bertozzi
>            Assignee: Matteo Bertozzi
>            Priority: Minor
>             Fix For: hbase-6055, 0.96.0
>
>         Attachments: HBASE-7367-v0.patch
>
>
> Currently snapshot don't care about ACL...
> and in the first draft snapshots should be disabled if the ACL coprocessor is enabled.
> After the first step, we can discuss how to handle the snapshot/restore/clone.
> Is saving and restoring the _acl_ related rights, the right way? maybe after 3 months we don't want to give the access the guys listed in the old _acl_...

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira