You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hbase.apache.org by Josh Elser <el...@apache.org> on 2018/01/02 23:04:53 UTC

Re: ADMIN required for `status` in hbase shell (HBASE-19131)


On 12/22/17 6:14 PM, Stack wrote:
> On Fri, Dec 22, 2017 at 11:58 AM, Josh Elser <el...@apache.org> wrote:
> 
>> Hey folks,
>>
>> Our Romil has been doing some testing with the tip of branch-2 and noticed
>> this little wrinkle with authn/authz enabled.
>>
>> In <branch-1.4, any user could invoke `status` in the shell. After
>> HBASE-19131, the user needs ADMIN to be able to do this. It's not 100%
>> clear to me from the release notes whether or not this was an expected
>> change. I'm unsure if it's the right thing to do or not.
>>
>> For `status 'detailed'`, I could see this extra information telling a
>> little "too much" for a normal user. But, for a plain-jane `status`, number
>> of HBase Master instances, regionservers (dead and alive), and the average
>> load seems fine for normal users.
>>
>> Thanks in advance!
>>
>>
> Seems like an oversight to me. Lets fix.
> S

Thanks boss.

Will file something and we can either land for the next RC or for beta-2.