You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@phoenix.apache.org by Pedro Boado <pe...@gmail.com> on 2017/02/16 10:03:31 UTC

Read only user permissions to Phoenix table - Phoenix 4.5

Hi all,

I have a quick question. We are still running on Phoenix 4.5 (I know, it's
not my fault) and we're trying to setup a read only user on a phoenix
table. The minimum set of permissions to get access through sqlline is

grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'

I was wondering whether there is a way for avoiding the need of the CREATE
permission on catalog tables.

Cheers,
Pedro.

Re: Read only user permissions to Phoenix table - Phoenix 4.5

Posted by "袁康 (基础平台部)" <yu...@didichuxing.com>.
why “RXC” is needed the minimum?

在 2017年2月17日，09:15，Sergey Soldatov <se...@gmail.com>> 写道：

Unfortunately some versions of Phoenix client is using HBase API (such as getHTableDescriptor) that requires HBase CREATE/ADMIN permissions on system tables. Moreover the upgrade path is trying to create system tables to check whether system requires an upgrade and that may fail with permission exception (that's your case).  Mostly those problems should be gone in 4.9 where upgrade is the manual operation. So, no easy way to avoid this problem without patching the sources (patch itself is obvious though).

Thanks,
Sergey

On Thu, Feb 16, 2017 at 2:03 AM, Pedro Boado <pe...@gmail.com>> wrote:
Hi all,

I have a quick question. We are still running on Phoenix 4.5 (I know, it's not my fault) and we're trying to setup a read only user on a phoenix table. The minimum set of permissions to get access through sqlline is

grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'

I was wondering whether there is a way for avoiding the need of the CREATE permission on catalog tables.

Cheers,
Pedro.

Re: Read only user permissions to Phoenix table - Phoenix 4.5

Posted by Sergey Soldatov <se...@gmail.com>.
Unfortunately some versions of Phoenix client is using HBase API (such
as getHTableDescriptor)
that requires HBase CREATE/ADMIN permissions on system tables. Moreover the
upgrade path is trying to create system tables to check whether system
requires an upgrade and that may fail with permission exception (that's
your case).  Mostly those problems should be gone in 4.9 where upgrade is
the manual operation. So, no easy way to avoid this problem without
patching the sources (patch itself is obvious though).

Thanks,
Sergey

On Thu, Feb 16, 2017 at 2:03 AM, Pedro Boado <pe...@gmail.com> wrote:

> Hi all,
>
> I have a quick question. We are still running on Phoenix 4.5 (I know, it's
> not my fault) and we're trying to setup a read only user on a phoenix
> table. The minimum set of permissions to get access through sqlline is
>
> grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
> grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
> grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
> grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
> grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'
>
> I was wondering whether there is a way for avoiding the need of the CREATE
> permission on catalog tables.
>
> Cheers,
> Pedro.
>
>