why “RXC” is needed the minimum?

在 2017年2月17日,09:15,Sergey Soldatov <sergeysoldatov@gmail.com> 写道:

Unfortunately some versions of Phoenix client is using HBase API (such as getHTableDescriptor) that requires HBase CREATE/ADMIN permissions on system tables. Moreover the upgrade path is trying to create system tables to check whether system requires an upgrade and that may fail with permission exception (that's your case).  Mostly those problems should be gone in 4.9 where upgrade is the manual operation. So, no easy way to avoid this problem without patching the sources (patch itself is obvious though). 

Thanks,
Sergey  

On Thu, Feb 16, 2017 at 2:03 AM, Pedro Boado <pedro.boado@gmail.com> wrote:
Hi all, 

I have a quick question. We are still running on Phoenix 4.5 (I know, it's not my fault) and we're trying to setup a read only user on a phoenix table. The minimum set of permissions to get access through sqlline is 

grant 'readonlyuser' , 'RXC', 'SYSTEM.CATALOG'
grant 'readonlyuser' , 'RXC', 'SYSTEM.SEQUENCE'
grant 'readonlyuser' , 'RXC', 'SYSTEM.STATS'
grant 'readonlyuser' , 'RXC', 'SYSTEM.FUNCTION'
grant 'readonlyuser' , 'RX', 'READONLY.TABLENAME'

I was wondering whether there is a way for avoiding the need of the CREATE permission on catalog tables.

Cheers,
Pedro.