Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-24744

enable_table_replication adding unnecessary entries for super user to ACL table

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 2.1.0
    • None
    • acl, security
    • None

    Description

      While enabling the table replication for the user table as an hbase user using the "enable_table_replication" command, permission has been granted automatically for the hbase user and getting listed in hbase:acl. The same behaviour is applicable to other users too.
      Issue Replication Steps:
      ========================

      hbase(main):001:0> whoami
      dhana (auth:SIMPLE)
      groups: dhana
      Took 0.0214 seconds
      hbase(main):002:0> list
      TABLE
      0 row(s)
      Took 0.4268 seconds
      => []
      hbase(main):003:0> create 'mytab','f1'
      Created table mytab
      Took 0.7834 seconds
      => Hbase::Table - mytab
      hbase(main):004:0> describe 'mytab'
      Table mytab is ENABLED
      mytab
      COLUMN FAMILIES DESCRIPTION
      {NAME => 'f1', VERSIONS => '1', EVICT_BLOCKS_ON_CLOSE => 'false', NEW_VERSION_BEHAVIOR => 'false', KE
      EP_DELETED_CELLS => 'FALSE', CACHE_DATA_ON_WRITE => 'false', DATA_BLOCK_ENCODING => 'NONE', TTL => 'F
      OREVER', MIN_VERSIONS => '0', REPLICATION_SCOPE => '0', BLOOMFILTER => 'ROW', CACHE_INDEX_ON_WRITE =>
      'false', IN_MEMORY => 'false', CACHE_BLOOMS_ON_WRITE => 'false', PREFETCH_BLOCKS_ON_OPEN => 'false',
      COMPRESSION => 'NONE', BLOCKCACHE => 'true', BLOCKSIZE => '65536'}
      1 row(s)
      Took 0.1319 seconds
      hbase(main):005:0> scan 'hbase:acl'
      ROW COLUMN+CELL
      hbase:acl column=l:dhana, timestamp=1593669605273, value=RWXCA
      mytab column=l:dhana, timestamp=1593673200269, value=RWXCA
      2 row(s)
      Took 0.0969 seconds
      hbase(main):006:0> exit

      hbase(main):001:0> whoami
      hbase (auth:SIMPLE)
      groups: hbase
      Took 0.0271 seconds
      hbase(main):002:0> scan 'hbase:acl'
      ROW COLUMN+CELL
      hbase:acl column=l:dhana, timestamp=1593669605273, value=RWXCA
      mytab column=l:dhana, timestamp=1593673200269, value=RWXCA
      2 row(s)
      Took 0.5223 seconds
      hbase(main):003:0> enable_table_replication 'mytab'
      The replication of table 'mytab' successfully enabled
      Took 16.0711 seconds
      hbase(main):004:0> scan 'hbase:acl'
      ROW COLUMN+CELL
      hbase:acl column=l:dhana, timestamp=1593669605273, value=RWXCA
      mytab column=l:dhana, timestamp=1593673200269, value=RWXCA
      mytab column=l:hbase, timestamp=1593673390976, value=RWXCA <========
      2 row(s)
      Took 0.0089 seconds
       

      Attachments

        Issue Links

          Activity

            People

              brfrn169 Toshihiro Suzuki
              dhanalakshmi Dhanalakshmi Periyalwar
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated: