[GitHub] [accumulo] cshannon commented on pull request #3011: Set proper permissions for root user on initial namespaces

[GitBox <gi...@apache.org>]

cshannon commented on PR #3011:
URL: https://github.com/apache/accumulo/pull/3011#issuecomment-1272316692

   There were 2 problems here that I fixed with permissions. I went ahead and gave ALTER_NAMESPACE, ALTER_TABLE, and READ.
   
   1. The first was that while ALTER_NAMESPACE was initially set in the map for the root user namespace permissions on the Accumulo namespace, right after that the ALTER_TABLE was added by calling put again using the same key and a singleton set so it was blowing away the first permission where as they need to be added to the same set.
   2. Permissions were missing entirely for the default namespace which I fixed. 
   
   Here is the output after this change:
   ```
   root@uno> userpermissions 
   System permissions: System.GRANT, System.CREATE_TABLE, System.DROP_TABLE, System.ALTER_TABLE, System.CREATE_USER, System.DROP_USER, System.ALTER_USER, System.SYSTEM, System.CREATE_NAMESPACE, System.DROP_NAMESPACE, System.ALTER_NAMESPACE, System.OBTAIN_DELEGATION_TOKEN
   
   Namespace permissions (): Namespace.READ, Namespace.ALTER_NAMESPACE, Namespace.ALTER_TABLE
   Namespace permissions (accumulo): Namespace.READ, Namespace.ALTER_NAMESPACE, Namespace.ALTER_TABLE
   
   Table permissions (accumulo.metadata): Table.READ, Table.ALTER_TABLE
   Table permissions (accumulo.replication): Table.READ
   Table permissions (accumulo.root): Table.READ, Table.ALTER_TABLE
   Table permissions (test1): Table.READ, Table.WRITE, Table.BULK_IMPORT, Table.ALTER_TABLE, Table.GRANT, Table.DROP_TABLE, Table.GET_SUMMARIES
   ```
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@accumulo.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org