[jira] [Commented] (ACCUMULO-2144) user lacking System.SYSTEM role should receive a more helpful error message

["Christopher Tubbs (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/ACCUMULO-2144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13863923#comment-13863923 ] 

Christopher Tubbs commented on ACCUMULO-2144:
---------------------------------------------

At the very least, an AccumuloSecurityException should be thrown, with PERMISSION_DENIED, if that's what the problem is. I'd have to check, but it's not clear that that's the reason it's being rejected. TApplicationException is a server-side error. It could be anything.

> user lacking System.SYSTEM role should receive a more helpful error message
> ---------------------------------------------------------------------------
>
>                 Key: ACCUMULO-2144
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-2144
>             Project: Accumulo
>          Issue Type: Improvement
>          Components: shell
>    Affects Versions: 1.5.0
>            Reporter: Arshak Navruzyan
>            Priority: Trivial
>              Labels: easyfix, error-feedback
>
> when the user lacks the System.SYSTEM role and attempts to run listcompactions or listscans the following output appears in the shell
>  TABLET SERVER        | AGE       | TYPE  | REASON | READ  | WROTE | TABLE           | TABLET                                   | INPUT | OUTPUT                              | ITERATORS | ITERATOR OPTIONS
> 10.240.165.43:9997 ERROR org.apache.thrift.TApplicationException: Internal error processing getActiveCompactions
> 10.240.203.36:9997 ERROR org.apache.thrift.TApplicationException: Internal error processing getActiveCompactions
> a more helpful output might be
> "username hasn't been granted the System.SYSTEM role required for executing this command"



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)