HBASE-28391 Remove the need for ADMIN permissions for listDecommissionedRegionServers (#5695)

shahrs87 · shahrs87 · commit 7636a2d67476 · 2024-02-27T11:55:40.000-08:00
(cherry picked from commit 4b55243)
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1204,7 +1204,7 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro
   @Override
   public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)
     throws IOException {
-    requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN);
+    requirePermission(ctx, "listDecommissionedRegionServers", Action.READ);
   }
 
   @Override

Original file line number	Diff line number	Diff line change
`@@ -1204,7 +1204,7 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro`
`1204`	`1204`	`@Override`
`1205`	`1205`	`public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)`
`1206`	`1206`	`throws IOException {`
`1207`		`- requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN);`
	`1207`	`+ requirePermission(ctx, "listDecommissionedRegionServers", Action.READ);`
`1208`	`1208`	`}`
`1209`	`1209`
`1210`	`1210`	`@Override`