Repository: hbase
Updated Branches:
  refs/heads/master ee32eebea -> 4ea490b63


HBASE-12811 [AccessController] NPE while scanning a table with user not having 
READ permission on the namespace (Ashish)


Project: http://git-wip-us.apache.org/repos/asf/hbase/repo
Commit: http://git-wip-us.apache.org/repos/asf/hbase/commit/4ea490b6
Tree: http://git-wip-us.apache.org/repos/asf/hbase/tree/4ea490b6
Diff: http://git-wip-us.apache.org/repos/asf/hbase/diff/4ea490b6

Branch: refs/heads/master
Commit: 4ea490b63aca6c4c6ce949a0f7aae543ebbee4fb
Parents: ee32eeb
Author: tedyu <[email protected]>
Authored: Thu Jan 8 09:06:12 2015 -0800
Committer: tedyu <[email protected]>
Committed: Thu Jan 8 09:06:12 2015 -0800

----------------------------------------------------------------------
 .../apache/hadoop/hbase/security/access/TableAuthManager.java    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/hbase/blob/4ea490b6/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/TableAuthManager.java
----------------------------------------------------------------------
diff --git 
a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/TableAuthManager.java
 
b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/TableAuthManager.java
index 4ed81dc..6ca40e6 100644
--- 
a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/TableAuthManager.java
+++ 
b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/TableAuthManager.java
@@ -508,8 +508,8 @@ public class TableAuthManager {
     }
     if (table == null) table = AccessControlLists.ACL_TABLE_NAME;
     // Namespace authorization supercedes table level
-    if 
(authorize(getNamespacePermissions(table.getNamespaceAsString()).getGroup(groupName),
-        table, family, action)) {
+    String namespace = table.getNamespaceAsString();
+    if (authorize(getNamespacePermissions(namespace).getGroup(groupName), 
namespace, action)) {
       return true;
     }
     // Check table level

Reply via email to