Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
0.94.26, 0.98.12, 2.0.0
-
None
-
Reviewed
Description
Currently, there is no access control for replicating WAL entries in secure HBase cluster. Any authenticated user can write any data they want to any table of a secure cluster by using the replication api.
Simple solution is to add permission check before replicating WAL entries. And only user with global write permission can replicate WAL entries to this cluster.
Another option is adding "Replication" action in hbase and only user with "Replication" permission can replicate WAL entries to this cluster?
What's your suggestion? Thanks