Details
-
Improvement
-
Status: Reopened
-
Major
-
Resolution: Unresolved
-
0.4
-
None
-
None
Description
Implement the existing revision manager component as HBase coprocessor endpoint. This will address following security issues:
Authorization: Coprocessor has access to the HBase ACL info and can use the same to authorize client access w/o relying on ZooKeper ACLs (difficult to maintain).
Write access to ZK for RM data will be limited to the HBase region servers vs. all clients using the storage driver (clients will only need ZK read access for HBase).
Attachments
Issue Links
- incorporates
-
HCATALOG-310 Turn current RM implementation into HBase Coprocessor
- Closed
- relates to
-
HCATALOG-323 ZooKeeper based Revision Manager should use Recoverable Zookeeper
- Open
1.
|
Turn current RM implementation into HBase Coprocessor | Closed | Thomas Weise | |
2.
|
Revision Manager Transaction Expiration | Open | Unassigned | |
3.
|
Revision Manager Security | Open | Unassigned | |
4.
|
Make beginTransaction idempotent | Open | Unassigned | |
5.
|
Packaging/Deployment for RM coprocessor | Open | Unassigned | |
6.
|
make RevisionManagerFactory.get() return Coprocessor implementation by default, update unit tests harness to load the endpoint | Open | Unassigned |