commit | 4b552434dbd9950aee28f183caba568c585c6f2a | [log] [tgz] |
---|---|---|
author | Rushabh Shah <shahrs87@apache.org> | Tue Feb 27 08:49:34 2024 -0800 |
committer | GitHub <noreply@github.com> | Tue Feb 27 08:49:34 2024 -0800 |
tree | 1fc29a63cf8f7c02d989eac6c5ee59b1c1f0b6fb | |
parent | c4a02f7fcd1d74385b87bb761d25b118ce080119 [diff] |
HBASE-28391 Remove the need for ADMIN permissions for listDecommissionedRegionServers (#5695)
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java index 66a7b3a..563470f 100644 --- a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java +++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1206,7 +1206,7 @@ @Override public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx) throws IOException { - requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN); + requirePermission(ctx, "listDecommissionedRegionServers", Action.READ); } @Override