權限管理 · Hadoop2.x

我們可以為用戶賦予RWXCA權限中的一個或多個。 ```sql R - read privilege 讀權限 W - write privilege 寫權限 C - create privilege 創建權限 A - admin privilege 管理權限 X - execute 執行權限 ``` （1）要進行權限管理，需要在 {hbase_home}/conf/hbase-site.xml 添加如下配置，然后重啟hbase服務。 ```xml <property> <name>hbase.security.authorization</name> <value>true</value> </property> <property> <name>hbase.coprocessor.master.classes</name> <value>org.apache.hadoop.hbase.security.access.AccessController</value> </property> <property> <name>hbase.coprocessor.region.classes</name> <value>org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController</value> </property> <property> <name>hbase.superuser</name>  <value>hbase,root,administrator</value> </property> ``` 當重啟hbase服務時，應該在hdfs上有一個 /hbase/data/hbase/acl 目錄。<br/> ```sql -- 賦予權限 -- 給root用戶可以對customer表進行RWXCA操作 hbase(main):003:0> grant 'root', 'RWXCA', 'customer' -- 查看權限 hbase(main):004:0> user_permission 'customer' User Namespace,Table,Family,Qualifier:Permission root default,customer,,: [Permission: actions=READ,WRITE,EXEC,CREATE,ADMIN] -- 撤銷權限 revoke 'root', 'customer' -- 應該善用hbase命令的幫助，比如查看grant的語法 hbase(main):005:0> grant ERROR: First argument should be a String Grant users specific rights. Syntax : grant <user>, <permissions> [, <@namespace> [, <table> [, <column family> [, <column qualifier>]]] permissions is either zero or more letters from the set "RWXCA". READ('R'), WRITE('W'), EXEC('X'), CREATE('C'), ADMIN('A') Note: Groups and users are granted access in the same way, but groups are prefixed with an '@' character. In the same way, tables and namespaces are specified, but namespaces are prefixed with an '@' character. For example: hbase> grant 'bobsmith', 'RWXCA' hbase> grant '@admins', 'RWXCA' hbase> grant 'bobsmith', 'RWXCA', '@ns1' hbase> grant 'bobsmith', 'RW', 't1', 'f1', 'col1' hbase> grant 'bobsmith', 'RW', 'ns1:t1', 'f1', 'col1' ```