You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by rm...@apache.org on 2018/01/23 01:10:03 UTC

ranger git commit: RANGER-1960 : HBase auth does not take table namespace into consideration for deleting snapshot

Repository: ranger
Updated Branches:
  refs/heads/master 1a5eba446 -> a0b11d621


RANGER-1960 : HBase auth does not take table namespace into consideration for deleting snapshot


Project: http://git-wip-us.apache.org/repos/asf/ranger/repo
Commit: http://git-wip-us.apache.org/repos/asf/ranger/commit/a0b11d62
Tree: http://git-wip-us.apache.org/repos/asf/ranger/tree/a0b11d62
Diff: http://git-wip-us.apache.org/repos/asf/ranger/diff/a0b11d62

Branch: refs/heads/master
Commit: a0b11d6217312dcf43effbb91792c3ef370572f4
Parents: 1a5eba4
Author: rmani <rm...@hortonworks.com>
Authored: Mon Jan 22 17:09:45 2018 -0800
Committer: rmani <rm...@hortonworks.com>
Committed: Mon Jan 22 17:09:45 2018 -0800

----------------------------------------------------------------------
 .../ranger/authorization/hbase/RangerAuthorizationCoprocessor.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ranger/blob/a0b11d62/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java
----------------------------------------------------------------------
diff --git a/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java b/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java
index 3b38d02..e30f795 100644
--- a/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java
+++ b/hbase-agent/src/main/java/org/apache/ranger/authorization/hbase/RangerAuthorizationCoprocessor.java
@@ -806,7 +806,7 @@ public class RangerAuthorizationCoprocessor extends RangerAuthorizationCoprocess
 	}
 	@Override
 	public void preDeleteSnapshot(ObserverContext<MasterCoprocessorEnvironment> ctx, SnapshotDescription snapshot) throws IOException {
-		requirePermission("deleteSnapshot", Permission.Action.ADMIN);
+		requirePermission("deleteSnapshot", snapshot.getTableBytes().toByteArray(), Permission.Action.ADMIN);
 	}
 	@Override
 	public void preDeleteTable(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName) throws IOException {