From f18f2eb7d96656cab9947305d27b2e3120171dfe Mon Sep 17 00:00:00 2001
From: Rushabh Shah <shahrs87@apache.org>
Date: Wed, 21 Feb 2024 15:32:47 -0800
Subject: [PATCH 1/2] HBASE-28391 Remove the need for ADMIN permissions for
 listDecommissionedRegionServers

---
 .../hadoop/hbase/security/access/AccessController.java      | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
index 66a7b3a27032..c0582aab64f3 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1203,12 +1203,6 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro
     requirePermission(ctx, "decommissionRegionServers", Action.ADMIN);
   }
 
-  @Override
-  public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)
-    throws IOException {
-    requirePermission(ctx, "listDecommissionedRegionServers", Action.ADMIN);
-  }
-
   @Override
   public void preRecommissionRegionServer(ObserverContext<MasterCoprocessorEnvironment> ctx,
     ServerName server, List<byte[]> encodedRegionNames) throws IOException {

From b1361ba12cf4fbc41a2abda53886d697c0fa43e8 Mon Sep 17 00:00:00 2001
From: Rushabh Shah <shahrs87@apache.org>
Date: Mon, 26 Feb 2024 21:03:32 -0800
Subject: [PATCH 2/2] HBASE-28391 Change to READ

---
 .../hadoop/hbase/security/access/AccessController.java      | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
index c0582aab64f3..563470f9404d 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -1203,6 +1203,12 @@ public void preDecommissionRegionServers(ObserverContext<MasterCoprocessorEnviro
     requirePermission(ctx, "decommissionRegionServers", Action.ADMIN);
   }
 
+  @Override
+  public void preListDecommissionedRegionServers(ObserverContext<MasterCoprocessorEnvironment> ctx)
+    throws IOException {
+    requirePermission(ctx, "listDecommissionedRegionServers", Action.READ);
+  }
+
   @Override
   public void preRecommissionRegionServer(ObserverContext<MasterCoprocessorEnvironment> ctx,
     ServerName server, List<byte[]> encodedRegionNames) throws IOException {