[jira] [Updated] (HBASE-7330) Security hooks missing in region server and master APIs.

["Andrew Purtell (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-7330?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Purtell updated HBASE-7330:
----------------------------------

    Affects Version/s:     (was: 0.94.3)
                           (was: 0.96.0)
    
> Security hooks missing in region server and master APIs. 
> ---------------------------------------------------------
>
>                 Key: HBASE-7330
>                 URL: https://issues.apache.org/jira/browse/HBASE-7330
>             Project: HBase
>          Issue Type: Umbrella
>          Components: master, regionserver, security
>            Reporter: Vandana Ayyalasomayajula
>
> Some of the APIs in Master and Region server are missing hooks to the coprocessors. So even if security is enabled, an unauthorized user can perform certain operations. 
> The following is the list of operations:
> 1. HMaster.offline()
> 2. HMaster.getHTableDescriptors()
> 3. HMaster.getHTableDescriptors(List<String> tableNames)
> 4. HRegionServer.getRegionInfo()
> 5. HRegionInterface.getLastFlushTime()
> 6. HRegionInterface.getStoreFileList(byte[] regionName, byte[] columnFamily)
> 7. HRegionInterface.getStoreFileList(byte[] regionName, byte[][] columnFamilies)
> 8. HRegionInterface.getStoreFileList(byte[] regionName
> 9. HRegionInterface.lockRow(final byte [] regionName, final byte [] row)
> 10. HRegionInterface.unlockRow(final byte [] regionName, final long lockId)
> 11. HRegionInterface.getOnlineRegions()
> 12. HRegionInterface.getHServerInfo()
> 13. HRegionInterface.replicateLogEntries(HLog.Entry[] entries)
> 14. HRegionInterface.stop()
> 15. HRegionInterface.OpenRegions()
> 16. HRegionInterface.closeRegion()

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira