You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by Ted Yu <yu...@gmail.com> on 2013/08/22 18:34:11 UTC

grant command syntax in 0.95

Hi,
In 0.94, grant.rb has the following:

Grant users specific rights.
Syntax : grant <user> <permissions> [<table> [<column family> [<column
qualifier>]]

In 0.95.2, I see:

Grant users specific rights.
Syntax : grant <user> <permissions> <table> <column family> <column
qualifier>

In 0.95.2, when I tried to grant permission on a table to user hrt_1, I got
some exception shown at the bottom of this email.

I want to confirm that in 0.95, granting permission for table must specify
column family and qualifier.

Thanks


hbase(main):003:0> grant 'hrt_1', 'R', 't1'

ERROR: no method 'grant' for arguments
(org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingStub,org.jruby.RubyString,org.jruby.java.proxies.ArrayJavaProxy,org.jruby.RubyNil,org.jruby.RubyNil,org.jruby.java.proxies.ArrayJavaProxy)
on Java::OrgApacheHadoopHbaseProtobuf::ProtobufUtil
  available overloads:

(org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface,java.lang.String,java.lang.String,org.apache.hadoop.hbase.security.access.Permission.Action[])

(org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface,java.lang.String,org.apache.hadoop.hbase.TableName,byte[],byte[],org.apache.hadoop.hbase.security.access.Permission.Action[])

(org.apache.hadoop.hbase.protobuf.generated.AccessControlProtos.AccessControlService.BlockingInterface,java.lang.String,org.apache.hadoop.hbase.security.access.Permission.Action[])

Here is some help for this command:
Grant users specific rights.
Syntax : grant <user> <permissions> <table> <column family> <column
qualifier>

permissions is either zero or more letters from the set "RWXCA".
READ('R'), WRITE('W'), EXEC('X'), CREATE('C'), ADMIN('A')

For example:

    hbase> grant 'bobsmith', 'RWXCA'
    hbase> grant 'bobsmith', 'RW', 't1', 'f1', 'col1'

Re: grant command syntax in 0.95

Posted by Ted Yu <yu...@gmail.com>.

Thanks for your response, Andrew.

I logged HBASE-9302.


On Thu, Aug 22, 2013 at 10:02 AM, Andrew Purtell <ap...@apache.org>wrote:

> On Thu, Aug 22, 2013 at 9:34 AM, Ted Yu <yu...@gmail.com> wrote:
>
> > I want to confirm that in 0.95, granting permission for table must
> specify
> > column family and qualifier.
> >
>
> IIRC, column family and qualifier can and should be set to null to act as
> wildcards, so this looks like a regression in shell functionality.
>
>
>
> --
> Best regards,
>
>    - Andy
>
> Problems worthy of attack prove their worth by hitting back. - Piet Hein
> (via Tom White)
>

Re: grant command syntax in 0.95

Posted by Andrew Purtell <ap...@apache.org>.

On Thu, Aug 22, 2013 at 9:34 AM, Ted Yu <yu...@gmail.com> wrote:

> I want to confirm that in 0.95, granting permission for table must specify
> column family and qualifier.
>

IIRC, column family and qualifier can and should be set to null to act as
wildcards, so this looks like a regression in shell functionality.

-- 
Best regards,

   - Andy

Problems worthy of attack prove their worth by hitting back. - Piet Hein
(via Tom White)