You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by "peng.jianhua (JIRA)" <ji...@apache.org> on 2017/09/06 06:38:00 UTC
[jira] [Resolved] (RANGER-1762) If need to add Admin(Role) in
RangerAuthorizationCoprocessor's preModifyTable() ,preModifyColumn()?
[ https://issues.apache.org/jira/browse/RANGER-1762?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
peng.jianhua resolved RANGER-1762.
----------------------------------
Resolution: Not A Bug
> If need to add Admin(Role) in RangerAuthorizationCoprocessor's preModifyTable() ,preModifyColumn()?
> ----------------------------------------------------------------------------------------------------
>
> Key: RANGER-1762
> URL: https://issues.apache.org/jira/browse/RANGER-1762
> Project: Ranger
> Issue Type: Bug
> Components: Ranger
> Reporter: peng.jianhua
> Priority: Minor
>
> 1、ranger class : org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor
> {code:title=RangerAuthorizationCoprocessor.java|borderStyle=solid}
> @Override
> public void preModifyColumn(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName, HColumnDescriptor descriptor) throws IOException {
> requirePermission("modifyColumn", tableName.getName(), null, null, Action.CREATE);
> }
> @Override
> public void preModifyTable(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName, HTableDescriptor htd) throws IOException {
> requirePermission("modifyTable", tableName.getName(), null, null, Action.CREATE);
> }
> {code}
> 2、hbase class :org.apache.hadoop.hbase.security.access.AccessController
> {code:title=AccessController.java|borderStyle=solid}
> @Override
> public void preModifyTable(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName,
> HTableDescriptor htd) throws IOException {
> requirePermission("modifyTable", tableName, null, null, Action.ADMIN, Action.CREATE);
> }
> @Override
> public void preModifyColumn(ObserverContext<MasterCoprocessorEnvironment> c, TableName tableName,
> HColumnDescriptor descriptor) throws IOException {
> requirePermission("modifyColumn", tableName, descriptor.getName(), null, Action.ADMIN,
> Action.CREATE);
> }
> {code}
> 3、permission if diff ,if need to add Action.Admin in ranger-hbsae plugin?
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)