From b362dc71d682dfc376bb631df96c2bb855a4721a Mon Sep 17 00:00:00 2001
From: Misty Stanley-Jones <mstanleyjones@cloudera.com>
Date: Thu, 2 Oct 2014 07:42:18 +1000
Subject: [PATCH] HBASE-11930 Document new permission check to roll WAL writer
 (Jerry He)

---
 src/main/docbkx/security.xml | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/src/main/docbkx/security.xml b/src/main/docbkx/security.xml
index c532a95e965..f662e2281ae 100644
--- a/src/main/docbkx/security.xml
+++ b/src/main/docbkx/security.xml
@@ -379,6 +379,10 @@ grant 'rest_server', 'RWCA'
 <property>
   <name>hbase.coprocessor.region.classes</name>
   <value>org.apache.hadoop.hbase.security.access.AccessController</value>
+</property>
+<property>
+  <name>hbase.coprocessor.regionserver.classes</name>
+  <value>org.apache.hadoop.hbase.security.access.AccessController</value>
 </property>
     ]]></programlisting>
           <para> For 0.94, add the following to the <code>hbase-site.xml</code> file on every server
@@ -665,6 +669,10 @@ Put#add(byte[] family, byte[] qualifier, long ts, byte[] value, Tag[] tag)
               <entry />
               <entry>Major Compact</entry>
             </row>
+            <row>
+              <entry />
+              <entry>Roll HLog</entry>
+            </row>
             <row>
               <entry />
               <entry>Grant</entry>
@@ -1196,6 +1204,17 @@ Put#add(byte[] family, byte[] qualifier, long ts, byte[] value, Tag[] tag)
                 <para>A</para>
               </entry>
             </row>
+            <row>
+              <entry>
+                <para>rollHLog</para>
+              </entry>
+              <entry>
+                <para>Global</para>
+              </entry>
+              <entry>
+                <para>A</para>
+              </entry>
+            </row>
             <row>
               <entry>
                 <para>mergeRegions</para>
@@ -1394,7 +1413,12 @@ Put#add(byte[] family, byte[] qualifier, long ts, byte[] value, Tag[] tag)
   <value>org.apache.hadoop.hbase.security.access.AccessController</value>
 </property>
 <property>
-<name>hbase.coprocessor.region.classes</name>
+  <name>hbase.coprocessor.region.classes</name>
+  <value>org.apache.hadoop.hbase.security.token.TokenProvider,
+  org.apache.hadoop.hbase.security.access.AccessController</value>
+</property>
+<property>
+  <name>hbase.coprocessor.regionserver.classes</name>
   <value>org.apache.hadoop.hbase.security.token.TokenProvider,
   org.apache.hadoop.hbase.security.access.AccessController</value>
 </property>