You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "Deepak Sharma (JIRA)" <ji...@apache.org> on 2016/11/23 08:37:58 UTC
[jira] [Created] (RANGER-1226) ranger policy is not working on the
hbase namespaces
Deepak Sharma created RANGER-1226:
-------------------------------------
Summary: ranger policy is not working on the hbase namespaces
Key: RANGER-1226
URL: https://issues.apache.org/jira/browse/RANGER-1226
Project: Ranger
Issue Type: Bug
Components: Ranger
Affects Versions: 0.7.0
Reporter: Deepak Sharma
Priority: Critical
Fix For: 0.7.0
Scenario:
1. do grant for user 'user1' on default namespace as follows:
grant 'user1 , 'RWCA' , '@default'
2. then see at ranger side one policy gets created since this is grant operation
3. then try to create table in the same namesapce , even by default it will go in default namespace
{code}
hbase(main):001:0> create 't1' , 'c1'
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'user1@EXAMPLE.COM' (action=create)
hbase(main):002:0> create 'default:t1' , 'c1'
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user 'user1@EXAMPLE.COM' (action=create)
{code}
issue: even if permission is there, then also creation of table fails.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)