HBASE-28391 Remove the need for ADMIN permissions for listDecommissionedRegionServers (#5695)

shahrs87 · shahrs87 · commit d69f6d8e0352 · 2024-02-27T10:09:02.000-08:00
(cherry picked from commit 4b55243)
diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1207,7 +1207,7 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro
   @Override
   public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)
     throws IOException {
-    requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN);
+    requirePermission(ctx, "listDecommissionedRegionServers", Action.READ);
   }
 
   @Override

Original file line number	Diff line number	Diff line change
`@@ -1207,7 +1207,7 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro`
`1207`	`1207`	`@Override`
`1208`	`1208`	`public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)`
`1209`	`1209`	`throws IOException {`
`1210`		`- requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN);`
	`1210`	`+ requirePermission(ctx, "listDecommissionedRegionServers", Action.READ);`
`1211`	`1211`	`}`
`1212`	`1212`
`1213`	`1213`	`@Override`