权限管理 · Hadoop2.x

我们可以为用户赋予RWXCA权限中的一个或多个。 ```sql R - read privilege 读权限 W - write privilege 写权限 C - create privilege 创建权限 A - admin privilege 管理权限 X - execute 执行权限 ``` （1）要进行权限管理，需要在 {hbase_home}/conf/hbase-site.xml 添加如下配置，然后重启hbase服务。 ```xml <property> <name>hbase.security.authorization</name> <value>true</value> </property> <property> <name>hbase.coprocessor.master.classes</name> <value>org.apache.hadoop.hbase.security.access.AccessController</value> </property> <property> <name>hbase.coprocessor.region.classes</name> <value>org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController</value> </property> <property> <name>hbase.superuser</name>  <value>hbase,root,administrator</value> </property> ``` 当重启hbase服务时，应该在hdfs上有一个 /hbase/data/hbase/acl 目录。<br/> ```sql -- 赋予权限 -- 给root用户可以对customer表进行RWXCA操作 hbase(main):003:0> grant 'root', 'RWXCA', 'customer' -- 查看权限 hbase(main):004:0> user_permission 'customer' User Namespace,Table,Family,Qualifier:Permission root default,customer,,: [Permission: actions=READ,WRITE,EXEC,CREATE,ADMIN] -- 撤销权限 revoke 'root', 'customer' -- 应该善用hbase命令的帮助，比如查看grant的语法 hbase(main):005:0> grant ERROR: First argument should be a String Grant users specific rights. Syntax : grant <user>, <permissions> [, <@namespace> [, <table> [, <column family> [, <column qualifier>]]] permissions is either zero or more letters from the set "RWXCA". READ('R'), WRITE('W'), EXEC('X'), CREATE('C'), ADMIN('A') Note: Groups and users are granted access in the same way, but groups are prefixed with an '@' character. In the same way, tables and namespaces are specified, but namespaces are prefixed with an '@' character. For example: hbase> grant 'bobsmith', 'RWXCA' hbase> grant '@admins', 'RWXCA' hbase> grant 'bobsmith', 'RWXCA', '@ns1' hbase> grant 'bobsmith', 'RW', 't1', 'f1', 'col1' hbase> grant 'bobsmith', 'RW', 'ns1:t1', 'f1', 'col1' ```