You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Deepak Sharma (JIRA)" <ji...@apache.org> on 2016/11/23 08:37:58 UTC

[jira] [Created] (RANGER-1226) ranger policy is not working on the hbase namespaces

Deepak Sharma created RANGER-1226:
-------------------------------------

             Summary: ranger policy is not working on the hbase namespaces
                 Key: RANGER-1226
                 URL: https://issues.apache.org/jira/browse/RANGER-1226
             Project: Ranger
          Issue Type: Bug
          Components: Ranger
    Affects Versions: 0.7.0
            Reporter: Deepak Sharma
            Priority: Critical
             Fix For: 0.7.0


Scenario:
1. do grant for user 'user1' on default namespace as follows:
grant 'user1 , 'RWCA' , '@default'
2. then see at ranger side one policy gets created since this is grant operation
3. then try to create table in the same namesapce , even by default it will go in default namespace
{code}
hbase(main):001:0> create 't1' , 'c1'

ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'user1@EXAMPLE.COM' (action=create)


hbase(main):002:0> create 'default:t1' , 'c1'

ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'user1@EXAMPLE.COM' (action=create)
{code}
issue: even if permission is there, then also creation of table fails.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)