Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-12916

No access control for replicating WAL entries

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.94.26, 0.98.12, 2.0.0
    • 1.0.0, 0.98.10, 1.1.0
    • Replication
    • None
    • Reviewed

    Description

      Currently, there is no access control for replicating WAL entries in secure HBase cluster. Any authenticated user can write any data they want to any table of a secure cluster by using the replication api.

      Simple solution is to add permission check before replicating WAL entries. And only user with global write permission can replicate WAL entries to this cluster.

      Another option is adding "Replication" action in hbase and only user with "Replication" permission can replicate WAL entries to this cluster?

      apurtell

      What's your suggestion? Thanks

      Attachments

        1. HBASE-12916-v3.diff
          10 kB
          Shaohui Liu
        2. HBASE-12916-v2.diff
          10 kB
          Shaohui Liu
        3. HBASE-12916-v1.diff
          7 kB
          Shaohui Liu
        4. hbase-12916-0.98.patch
          10 kB
          Enis Soztutar

        Activity

          People

            liushaohui Shaohui Liu
            liushaohui Shaohui Liu
            Votes:
            0 Vote for this issue
            Watchers:
            8 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: