restrict hbase users in ambari

arunpoy — Wed, 07 Dec 2016 20:01:15 GMT

By default hbase allows all users to drop hbase tables and delete rows. How to prevent the users from doing drop and delete from ambari. i remember using it through the property hbase.superuser. the above property has just hbase in its value. any thoughts

Re: restrict hbase users in ambari

Former Member — Wed, 07 Dec 2016 21:09:14 GMT

@ARUN

I do not see any option from ambari side to do that. However you should be able to set the ACL via HBase itself as described in: http://hbase.apache.org/0.94/book/hbase.accesscontrol.configuration.html

The "hbase:acl" table defines Access Control Lists which helps us in to limiting the privileges of users to hbase table.

You must set the ACLs for all those users who will be responsible for create/update/delete operations in HBase. As by default every once can access others table.

HBase ACLs support the following privileges:

a)Read

b)Write

c)Create tables

d)Administrator

Example:

1. Start the HBase shell. On the HBase Master host:

hbase shell

2. Set ACLs using the HBase shell:

grant '$USER', '$permissions'

Ranger:

You can also create Ranger policies by issuing grant/revoke commands via hbase shell.

As described in Page-25 in the following slide: http://www.slideshare.net/Hadoop_Summit/securing-hadoop-with-apache-ranger

question Re: restrict hbase users in ambari in Archives of Support Questions (Read Only)

restrict hbase users in ambari

Re: restrict hbase users in ambari