You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Ted Yu (JIRA)" <ji...@apache.org> on 2016/04/28 18:10:12 UTC

[jira] [Created] (AMBARI-16164) Put HBase master UI into readonly mode for secure deployment

Ted Yu created AMBARI-16164:
-------------------------------

             Summary: Put HBase master UI into readonly mode for secure deployment
                 Key: AMBARI-16164
                 URL: https://issues.apache.org/jira/browse/AMBARI-16164
             Project: Ambari
          Issue Type: Improvement
            Reporter: Ted Yu


Currently in secure deployment, user can request compaction / splitting through hbase master UI.
This potentially exposes vulnerability to various attacks.

There is config parameter, hbase.master.ui.readonly, with default value of false.

In secure deployment, Master UI should be put to readonly mode (setting the above parameter to true).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)