You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hbase.apache.org by Josh Elser <el...@apache.org> on 2017/12/22 19:58:33 UTC
ADMIN required for `status` in hbase shell (HBASE-19131)
Hey folks,
Our Romil has been doing some testing with the tip of branch-2 and
noticed this little wrinkle with authn/authz enabled.
In <branch-1.4, any user could invoke `status` in the shell. After
HBASE-19131, the user needs ADMIN to be able to do this. It's not 100%
clear to me from the release notes whether or not this was an expected
change. I'm unsure if it's the right thing to do or not.
For `status 'detailed'`, I could see this extra information telling a
little "too much" for a normal user. But, for a plain-jane `status`,
number of HBase Master instances, regionservers (dead and alive), and
the average load seems fine for normal users.
Thanks in advance!
- Josh
Re: ADMIN required for `status` in hbase shell (HBASE-19131)
Posted by Josh Elser <el...@apache.org>.
On 12/22/17 6:14 PM, Stack wrote:
> On Fri, Dec 22, 2017 at 11:58 AM, Josh Elser <el...@apache.org> wrote:
>
>> Hey folks,
>>
>> Our Romil has been doing some testing with the tip of branch-2 and noticed
>> this little wrinkle with authn/authz enabled.
>>
>> In <branch-1.4, any user could invoke `status` in the shell. After
>> HBASE-19131, the user needs ADMIN to be able to do this. It's not 100%
>> clear to me from the release notes whether or not this was an expected
>> change. I'm unsure if it's the right thing to do or not.
>>
>> For `status 'detailed'`, I could see this extra information telling a
>> little "too much" for a normal user. But, for a plain-jane `status`, number
>> of HBase Master instances, regionservers (dead and alive), and the average
>> load seems fine for normal users.
>>
>> Thanks in advance!
>>
>>
> Seems like an oversight to me. Lets fix.
> S
Thanks boss.
Will file something and we can either land for the next RC or for beta-2.
Re: ADMIN required for `status` in hbase shell (HBASE-19131)
Posted by Stack <st...@duboce.net>.
On Fri, Dec 22, 2017 at 11:58 AM, Josh Elser <el...@apache.org> wrote:
> Hey folks,
>
> Our Romil has been doing some testing with the tip of branch-2 and noticed
> this little wrinkle with authn/authz enabled.
>
> In <branch-1.4, any user could invoke `status` in the shell. After
> HBASE-19131, the user needs ADMIN to be able to do this. It's not 100%
> clear to me from the release notes whether or not this was an expected
> change. I'm unsure if it's the right thing to do or not.
>
> For `status 'detailed'`, I could see this extra information telling a
> little "too much" for a normal user. But, for a plain-jane `status`, number
> of HBase Master instances, regionservers (dead and alive), and the average
> load seems fine for normal users.
>
> Thanks in advance!
>
>
Seems like an oversight to me. Lets fix.
S
> - Josh
>