[jira] [Resolved] (HBASE-6086) Admin operations on a table should be authorized against table permissions instead of global permissions.

["Andrew Purtell (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-6086?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Purtell resolved HBASE-6086.
-----------------------------------

    Resolution: Duplicate
    
> Admin operations on a table should be authorized against table permissions instead of global permissions.
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-6086
>                 URL: https://issues.apache.org/jira/browse/HBASE-6086
>             Project: HBase
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.94.0
>            Reporter: Laxman
>            Assignee: Laxman
>              Labels: acl, security
>
> Still some inconsistency exists after HBASE-6061. We actually need to authorize against table permissions instead of global permissions here.
> {code}
> +  private void requireTableAdminPermission(MasterCoprocessorEnvironment e,
> +      byte[] tableName) throws IOException {
> +    if (isActiveUserTableOwner(e, tableName)) {
> +      requirePermission(Permission.Action.CREATE);
> +    } else {
> +      requirePermission(Permission.Action.ADMIN);
> +    }
> +  }
> {code}

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira