How-to: enable hbase ACL and verify

最新推荐文章于 2022-03-31 16:57:31 发布

chenfangfang_2015

最新推荐文章于 2022-03-31 16:57:31 发布

阅读量1.9k

点赞数

CC 4.0 BY-SA版权

文章标签： hbase acl 基础架构

本文链接：https://blog.youkuaiyun.com/lulynn/article/details/46897123

通过配置HBase安全授权，实现管理员为特定用户（如chenfangfang）授予读写权限，允许其访问并操作指定表（如employee）。案例展示了如何验证权限分配，并通过授权操作使用户能够扫描和修改表数据。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Add following configuration in hbase-site.xml:
<property>
<name>hbase.security.authorization</name>
<value>true</value>
</property>

<property>
<name>hbase.coprocessor.master.classes</name>
<value>org.apache.hadoop.hbase.security.access.AccessController</value>
</property>

<property>
<name>hbase.coprocessor.region.classes</name>
<value>org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController</value>
</property>
restart hbase cluster

Verify:

take htable named employee as example
hadoop admin user: hadoop, testing user: chenfangfang
Original: not grant to user chenfangfang
- The permission is as following(run as hadoop admin user):
hbase(main):009:0> user_permission 'employee2'
User                                       Namespace,Table,Family,Qualifier:Permission
hadoop                                    default,employee2,,: [Permission: actions=READ,WRITE,EXEC,CREATE,ADMIN]
- User chenfangfang could not scan this htable:
hbase(main):002:0> scan 'employee2'
ROW                                        COLUMN+CELL
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions (table=employee2, action=READ)
Grant RW(read+write) to chenfangfang:
- Run as admin user:
hbase(main):010:0> grant 'chenfangfang', 'RW', 'employee2'
0 row(s) in 0.4670 seconds
hbase(main):012:0> user_permission 'employee2'
User                                       Namespace,Table,Family,Qualifier:Permission
hadoop                                    default,employee2,,: [Permission: actions=READ,WRITE,EXEC,CREATE,ADMIN]
chenfangfang                              default,employee2,,: [Permission: actions=READ,WRITE]
2 row(s) in 0.3000 seconds
- Run as user chenfangfang: could scan and put
hbase(main):003:0> scan 'employee2'
ROW                                        COLUMN+CELL
BeiJing                                   column=address:country, timestamp=1436947463771, value=China
Hong                                      column=address:country, timestamp=1436947135888, value=China
2 row(s) in 0.0440 seconds
hbase(main):004:0> put 'employee2', 'BJ', 'address:country', 'China'
0 row(s) in 0.0690 seconds
hbase(main):005:0> put 'employee2', 'BJ', 'address:country', 'China'scan 'employee2'
ROW                                        COLUMN+CELL
BJ                                        column=address:country, timestamp=1436956463818, value=China
BeiJing                                   column=address:country, timestamp=1436947463771, value=China
Hong                                      column=address:country, timestamp=1436947135888, value=China
3 row(s) in 0.0140 seconds