Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-21163

Support backup-and-restore operations without Hbase Super user privilege

    XMLWordPrintableJSON

Details

    Description

      Hello Team,

      I am opening this Apache Jira to request for an analysis on considering following problem statement:
      Currently backup-and-restore utility is designed to work with "hbase" superuser privileges.

      I see at-least couple concerns on that, may be more, will add more later on:

      • For smaller organizations with less than 20 hbase tables or couple of clusters, it is manageable, hbase admins. However, for larger organizations or larger clusters, that would need providing hbase super user access to many people to manage such operations which can be a security risk on source cluster.
      • In certain scenarios, it may be typical to have one DR Cluster in remote data center to store backup tables, and having super privileges for all tables in remote cluster is another risk for same reasons above.

      I suggest to review into making backup and restore without hbase super privileges .

      Tenants or application admins may have certainly have admin access to relevant tables/namespaces/snapshots.

      Here is an example on what I am proposing from RDBMS : https://docs.oracle.com/cd/E16926_01/doc.121/e16564/configure_users_classes.htm#OBADM144

      Thanks

       

      PS: Forgive me if I hadn't opened my second apache Jira correct way, happy to correct it.

      Attachments

        Issue Links

          Activity

            People

              vrodionov Vladimir Rodionov
              sujit Sujit P
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated: