Repository: hbase-site Updated Branches: refs/heads/asf-site d0a296b6a -> 2bb8bd01c
http://git-wip-us.apache.org/repos/asf/hbase-site/blob/2bb8bd01/testdevapidocs/src-html/org/apache/hadoop/hbase/security/access/TestWithDisabledAuthorization.html ---------------------------------------------------------------------- diff --git a/testdevapidocs/src-html/org/apache/hadoop/hbase/security/access/TestWithDisabledAuthorization.html b/testdevapidocs/src-html/org/apache/hadoop/hbase/security/access/TestWithDisabledAuthorization.html index 4869eb5..6d71e47 100644 --- a/testdevapidocs/src-html/org/apache/hadoop/hbase/security/access/TestWithDisabledAuthorization.html +++ b/testdevapidocs/src-html/org/apache/hadoop/hbase/security/access/TestWithDisabledAuthorization.html @@ -844,243 +844,228 @@ <span class="sourceLineNo">836</span> }<a name="line.836"></a> <span class="sourceLineNo">837</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.837"></a> <span class="sourceLineNo">838</span><a name="line.838"></a> -<span class="sourceLineNo">839</span> // preMerge<a name="line.839"></a> +<span class="sourceLineNo">839</span> // preRollWALWriterRequest<a name="line.839"></a> <span class="sourceLineNo">840</span> verifyAllowed(new AccessTestAction() {<a name="line.840"></a> <span class="sourceLineNo">841</span> @Override<a name="line.841"></a> <span class="sourceLineNo">842</span> public Object run() throws Exception {<a name="line.842"></a> -<span class="sourceLineNo">843</span> HTableDescriptor htd = new HTableDescriptor(TEST_TABLE.getTableName());<a name="line.843"></a> -<span class="sourceLineNo">844</span> Region region_a = mock(Region.class);<a name="line.844"></a> -<span class="sourceLineNo">845</span> when(region_a.getTableDescriptor()).thenReturn(htd);<a name="line.845"></a> -<span class="sourceLineNo">846</span> Region region_b = mock(Region.class);<a name="line.846"></a> -<span class="sourceLineNo">847</span> when(region_b.getTableDescriptor()).thenReturn(htd);<a name="line.847"></a> -<span class="sourceLineNo">848</span> ACCESS_CONTROLLER.preMerge(ObserverContext.createAndPrepare(RSCP_ENV, null), region_a,<a name="line.848"></a> -<span class="sourceLineNo">849</span> region_b);<a name="line.849"></a> -<span class="sourceLineNo">850</span> return null;<a name="line.850"></a> -<span class="sourceLineNo">851</span> }<a name="line.851"></a> -<span class="sourceLineNo">852</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.852"></a> -<span class="sourceLineNo">853</span><a name="line.853"></a> -<span class="sourceLineNo">854</span> // preRollWALWriterRequest<a name="line.854"></a> -<span class="sourceLineNo">855</span> verifyAllowed(new AccessTestAction() {<a name="line.855"></a> -<span class="sourceLineNo">856</span> @Override<a name="line.856"></a> -<span class="sourceLineNo">857</span> public Object run() throws Exception {<a name="line.857"></a> -<span class="sourceLineNo">858</span> ACCESS_CONTROLLER.preRollWALWriterRequest(ObserverContext.createAndPrepare(RSCP_ENV,<a name="line.858"></a> -<span class="sourceLineNo">859</span> null));<a name="line.859"></a> +<span class="sourceLineNo">843</span> ACCESS_CONTROLLER.preRollWALWriterRequest(ObserverContext.createAndPrepare(RSCP_ENV,<a name="line.843"></a> +<span class="sourceLineNo">844</span> null));<a name="line.844"></a> +<span class="sourceLineNo">845</span> return null;<a name="line.845"></a> +<span class="sourceLineNo">846</span> }<a name="line.846"></a> +<span class="sourceLineNo">847</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.847"></a> +<span class="sourceLineNo">848</span><a name="line.848"></a> +<span class="sourceLineNo">849</span> }<a name="line.849"></a> +<span class="sourceLineNo">850</span><a name="line.850"></a> +<span class="sourceLineNo">851</span> /** Test region observer */<a name="line.851"></a> +<span class="sourceLineNo">852</span> @Test<a name="line.852"></a> +<span class="sourceLineNo">853</span> public void testPassiveRegionOperations() throws Exception {<a name="line.853"></a> +<span class="sourceLineNo">854</span><a name="line.854"></a> +<span class="sourceLineNo">855</span> // preOpen<a name="line.855"></a> +<span class="sourceLineNo">856</span> verifyAllowed(new AccessTestAction() {<a name="line.856"></a> +<span class="sourceLineNo">857</span> @Override<a name="line.857"></a> +<span class="sourceLineNo">858</span> public Object run() throws Exception {<a name="line.858"></a> +<span class="sourceLineNo">859</span> ACCESS_CONTROLLER.preOpen(ObserverContext.createAndPrepare(RCP_ENV, null));<a name="line.859"></a> <span class="sourceLineNo">860</span> return null;<a name="line.860"></a> <span class="sourceLineNo">861</span> }<a name="line.861"></a> <span class="sourceLineNo">862</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.862"></a> <span class="sourceLineNo">863</span><a name="line.863"></a> -<span class="sourceLineNo">864</span> }<a name="line.864"></a> -<span class="sourceLineNo">865</span><a name="line.865"></a> -<span class="sourceLineNo">866</span> /** Test region observer */<a name="line.866"></a> -<span class="sourceLineNo">867</span> @Test<a name="line.867"></a> -<span class="sourceLineNo">868</span> public void testPassiveRegionOperations() throws Exception {<a name="line.868"></a> -<span class="sourceLineNo">869</span><a name="line.869"></a> -<span class="sourceLineNo">870</span> // preOpen<a name="line.870"></a> -<span class="sourceLineNo">871</span> verifyAllowed(new AccessTestAction() {<a name="line.871"></a> -<span class="sourceLineNo">872</span> @Override<a name="line.872"></a> -<span class="sourceLineNo">873</span> public Object run() throws Exception {<a name="line.873"></a> -<span class="sourceLineNo">874</span> ACCESS_CONTROLLER.preOpen(ObserverContext.createAndPrepare(RCP_ENV, null));<a name="line.874"></a> -<span class="sourceLineNo">875</span> return null;<a name="line.875"></a> -<span class="sourceLineNo">876</span> }<a name="line.876"></a> -<span class="sourceLineNo">877</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.877"></a> -<span class="sourceLineNo">878</span><a name="line.878"></a> -<span class="sourceLineNo">879</span> // preFlush<a name="line.879"></a> -<span class="sourceLineNo">880</span> verifyAllowed(new AccessTestAction() {<a name="line.880"></a> -<span class="sourceLineNo">881</span> @Override<a name="line.881"></a> -<span class="sourceLineNo">882</span> public Object run() throws Exception {<a name="line.882"></a> -<span class="sourceLineNo">883</span> ACCESS_CONTROLLER.preFlush(ObserverContext.createAndPrepare(RCP_ENV, null));<a name="line.883"></a> -<span class="sourceLineNo">884</span> return null;<a name="line.884"></a> -<span class="sourceLineNo">885</span> }<a name="line.885"></a> -<span class="sourceLineNo">886</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.886"></a> -<span class="sourceLineNo">887</span><a name="line.887"></a> -<span class="sourceLineNo">888</span> // preGetOp<a name="line.888"></a> -<span class="sourceLineNo">889</span> verifyAllowed(new AccessTestAction() {<a name="line.889"></a> -<span class="sourceLineNo">890</span> @Override<a name="line.890"></a> -<span class="sourceLineNo">891</span> public Object run() throws Exception {<a name="line.891"></a> -<span class="sourceLineNo">892</span> List<Cell> cells = Lists.newArrayList();<a name="line.892"></a> -<span class="sourceLineNo">893</span> ACCESS_CONTROLLER.preGetOp(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.893"></a> -<span class="sourceLineNo">894</span> new Get(TEST_ROW), cells);<a name="line.894"></a> -<span class="sourceLineNo">895</span> return null;<a name="line.895"></a> -<span class="sourceLineNo">896</span> }<a name="line.896"></a> -<span class="sourceLineNo">897</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.897"></a> -<span class="sourceLineNo">898</span><a name="line.898"></a> -<span class="sourceLineNo">899</span> // preExists<a name="line.899"></a> -<span class="sourceLineNo">900</span> verifyAllowed(new AccessTestAction() {<a name="line.900"></a> -<span class="sourceLineNo">901</span> @Override<a name="line.901"></a> -<span class="sourceLineNo">902</span> public Object run() throws Exception {<a name="line.902"></a> -<span class="sourceLineNo">903</span> ACCESS_CONTROLLER.preExists(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.903"></a> -<span class="sourceLineNo">904</span> new Get(TEST_ROW), true);<a name="line.904"></a> -<span class="sourceLineNo">905</span> return null;<a name="line.905"></a> -<span class="sourceLineNo">906</span> }<a name="line.906"></a> -<span class="sourceLineNo">907</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.907"></a> -<span class="sourceLineNo">908</span><a name="line.908"></a> -<span class="sourceLineNo">909</span> // prePut<a name="line.909"></a> -<span class="sourceLineNo">910</span> verifyAllowed(new AccessTestAction() {<a name="line.910"></a> -<span class="sourceLineNo">911</span> @Override<a name="line.911"></a> -<span class="sourceLineNo">912</span> public Object run() throws Exception {<a name="line.912"></a> -<span class="sourceLineNo">913</span> ACCESS_CONTROLLER.prePut(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.913"></a> -<span class="sourceLineNo">914</span> new Put(TEST_ROW), new WALEdit(), Durability.USE_DEFAULT);<a name="line.914"></a> -<span class="sourceLineNo">915</span> return null;<a name="line.915"></a> -<span class="sourceLineNo">916</span> }<a name="line.916"></a> -<span class="sourceLineNo">917</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.917"></a> -<span class="sourceLineNo">918</span><a name="line.918"></a> -<span class="sourceLineNo">919</span> // preDelete<a name="line.919"></a> -<span class="sourceLineNo">920</span> verifyAllowed(new AccessTestAction() {<a name="line.920"></a> -<span class="sourceLineNo">921</span> @Override<a name="line.921"></a> -<span class="sourceLineNo">922</span> public Object run() throws Exception {<a name="line.922"></a> -<span class="sourceLineNo">923</span> ACCESS_CONTROLLER.preDelete(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.923"></a> -<span class="sourceLineNo">924</span> new Delete(TEST_ROW), new WALEdit(), Durability.USE_DEFAULT);<a name="line.924"></a> -<span class="sourceLineNo">925</span> return null;<a name="line.925"></a> -<span class="sourceLineNo">926</span> }<a name="line.926"></a> -<span class="sourceLineNo">927</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.927"></a> -<span class="sourceLineNo">928</span><a name="line.928"></a> -<span class="sourceLineNo">929</span> // preBatchMutate<a name="line.929"></a> -<span class="sourceLineNo">930</span> verifyAllowed(new AccessTestAction() {<a name="line.930"></a> -<span class="sourceLineNo">931</span> @Override<a name="line.931"></a> -<span class="sourceLineNo">932</span> public Object run() throws Exception {<a name="line.932"></a> -<span class="sourceLineNo">933</span> ACCESS_CONTROLLER.preBatchMutate(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.933"></a> -<span class="sourceLineNo">934</span> new MiniBatchOperationInProgress<>(null, null, null, 0, 0));<a name="line.934"></a> -<span class="sourceLineNo">935</span> return null;<a name="line.935"></a> -<span class="sourceLineNo">936</span> }<a name="line.936"></a> -<span class="sourceLineNo">937</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.937"></a> -<span class="sourceLineNo">938</span><a name="line.938"></a> -<span class="sourceLineNo">939</span> // preCheckAndPut<a name="line.939"></a> -<span class="sourceLineNo">940</span> verifyAllowed(new AccessTestAction() {<a name="line.940"></a> -<span class="sourceLineNo">941</span> @Override<a name="line.941"></a> -<span class="sourceLineNo">942</span> public Object run() throws Exception {<a name="line.942"></a> -<span class="sourceLineNo">943</span> ACCESS_CONTROLLER.preCheckAndPut(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.943"></a> -<span class="sourceLineNo">944</span> TEST_ROW, TEST_FAMILY, TEST_Q1, CompareOperator.EQUAL,<a name="line.944"></a> -<span class="sourceLineNo">945</span> new BinaryComparator("foo".getBytes()), new Put(TEST_ROW), true);<a name="line.945"></a> -<span class="sourceLineNo">946</span> return null;<a name="line.946"></a> -<span class="sourceLineNo">947</span> }<a name="line.947"></a> -<span class="sourceLineNo">948</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.948"></a> -<span class="sourceLineNo">949</span><a name="line.949"></a> -<span class="sourceLineNo">950</span> // preCheckAndDelete<a name="line.950"></a> -<span class="sourceLineNo">951</span> verifyAllowed(new AccessTestAction() {<a name="line.951"></a> -<span class="sourceLineNo">952</span> @Override<a name="line.952"></a> -<span class="sourceLineNo">953</span> public Object run() throws Exception {<a name="line.953"></a> -<span class="sourceLineNo">954</span> ACCESS_CONTROLLER.preCheckAndDelete(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.954"></a> -<span class="sourceLineNo">955</span> TEST_ROW, TEST_FAMILY, TEST_Q1, CompareOperator.EQUAL,<a name="line.955"></a> -<span class="sourceLineNo">956</span> new BinaryComparator("foo".getBytes()), new Delete(TEST_ROW), true);<a name="line.956"></a> -<span class="sourceLineNo">957</span> return null;<a name="line.957"></a> -<span class="sourceLineNo">958</span> }<a name="line.958"></a> -<span class="sourceLineNo">959</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.959"></a> -<span class="sourceLineNo">960</span><a name="line.960"></a> -<span class="sourceLineNo">961</span> // preAppend<a name="line.961"></a> -<span class="sourceLineNo">962</span> verifyAllowed(new AccessTestAction() {<a name="line.962"></a> -<span class="sourceLineNo">963</span> @Override<a name="line.963"></a> -<span class="sourceLineNo">964</span> public Object run() throws Exception {<a name="line.964"></a> -<span class="sourceLineNo">965</span> ACCESS_CONTROLLER.preAppend(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.965"></a> -<span class="sourceLineNo">966</span> new Append(TEST_ROW));<a name="line.966"></a> -<span class="sourceLineNo">967</span> return null;<a name="line.967"></a> -<span class="sourceLineNo">968</span> }<a name="line.968"></a> -<span class="sourceLineNo">969</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.969"></a> -<span class="sourceLineNo">970</span><a name="line.970"></a> -<span class="sourceLineNo">971</span> // preIncrement<a name="line.971"></a> -<span class="sourceLineNo">972</span> verifyAllowed(new AccessTestAction() {<a name="line.972"></a> -<span class="sourceLineNo">973</span> @Override<a name="line.973"></a> -<span class="sourceLineNo">974</span> public Object run() throws Exception {<a name="line.974"></a> -<span class="sourceLineNo">975</span> ACCESS_CONTROLLER.preIncrement(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.975"></a> -<span class="sourceLineNo">976</span> new Increment(TEST_ROW));<a name="line.976"></a> -<span class="sourceLineNo">977</span> return null;<a name="line.977"></a> -<span class="sourceLineNo">978</span> }<a name="line.978"></a> -<span class="sourceLineNo">979</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.979"></a> -<span class="sourceLineNo">980</span><a name="line.980"></a> -<span class="sourceLineNo">981</span> // preScannerOpen<a name="line.981"></a> -<span class="sourceLineNo">982</span> verifyAllowed(new AccessTestAction() {<a name="line.982"></a> -<span class="sourceLineNo">983</span> @Override<a name="line.983"></a> -<span class="sourceLineNo">984</span> public Object run() throws Exception {<a name="line.984"></a> -<span class="sourceLineNo">985</span> ACCESS_CONTROLLER.preScannerOpen(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.985"></a> -<span class="sourceLineNo">986</span> new Scan(), mock(RegionScanner.class));<a name="line.986"></a> -<span class="sourceLineNo">987</span> return null;<a name="line.987"></a> -<span class="sourceLineNo">988</span> }<a name="line.988"></a> -<span class="sourceLineNo">989</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.989"></a> -<span class="sourceLineNo">990</span><a name="line.990"></a> -<span class="sourceLineNo">991</span> // preBulkLoadHFile<a name="line.991"></a> -<span class="sourceLineNo">992</span> verifyAllowed(new AccessTestAction() {<a name="line.992"></a> -<span class="sourceLineNo">993</span> @Override<a name="line.993"></a> -<span class="sourceLineNo">994</span> public Object run() throws Exception {<a name="line.994"></a> -<span class="sourceLineNo">995</span> List<Pair<byte[], String>> paths = Lists.newArrayList();<a name="line.995"></a> -<span class="sourceLineNo">996</span> ACCESS_CONTROLLER.preBulkLoadHFile(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.996"></a> -<span class="sourceLineNo">997</span> paths);<a name="line.997"></a> -<span class="sourceLineNo">998</span> return null;<a name="line.998"></a> -<span class="sourceLineNo">999</span> }<a name="line.999"></a> -<span class="sourceLineNo">1000</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.1000"></a> -<span class="sourceLineNo">1001</span><a name="line.1001"></a> -<span class="sourceLineNo">1002</span> }<a name="line.1002"></a> -<span class="sourceLineNo">1003</span><a name="line.1003"></a> -<span class="sourceLineNo">1004</span> @Test<a name="line.1004"></a> -<span class="sourceLineNo">1005</span> public void testPassiveCellPermissions() throws Exception {<a name="line.1005"></a> -<span class="sourceLineNo">1006</span> final Configuration conf = TEST_UTIL.getConfiguration();<a name="line.1006"></a> -<span class="sourceLineNo">1007</span><a name="line.1007"></a> -<span class="sourceLineNo">1008</span> // store two sets of values, one store with a cell level ACL, and one without<a name="line.1008"></a> -<span class="sourceLineNo">1009</span> verifyAllowed(new AccessTestAction() {<a name="line.1009"></a> -<span class="sourceLineNo">1010</span> @Override<a name="line.1010"></a> -<span class="sourceLineNo">1011</span> public Object run() throws Exception {<a name="line.1011"></a> -<span class="sourceLineNo">1012</span> try(Connection connection = ConnectionFactory.createConnection(conf);<a name="line.1012"></a> -<span class="sourceLineNo">1013</span> Table t = connection.getTable(TEST_TABLE.getTableName())) {<a name="line.1013"></a> -<span class="sourceLineNo">1014</span> Put p;<a name="line.1014"></a> -<span class="sourceLineNo">1015</span> // with ro ACL<a name="line.1015"></a> -<span class="sourceLineNo">1016</span> p = new Put(TEST_ROW).addColumn(TEST_FAMILY, TEST_Q1, ZERO);<a name="line.1016"></a> -<span class="sourceLineNo">1017</span> p.setACL(USER_NONE.getShortName(), new Permission(Action.READ));<a name="line.1017"></a> -<span class="sourceLineNo">1018</span> t.put(p);<a name="line.1018"></a> -<span class="sourceLineNo">1019</span> // with rw ACL<a name="line.1019"></a> -<span class="sourceLineNo">1020</span> p = new Put(TEST_ROW).addColumn(TEST_FAMILY, TEST_Q2, ZERO);<a name="line.1020"></a> -<span class="sourceLineNo">1021</span> p.setACL(USER_NONE.getShortName(), new Permission(Action.READ, Action.WRITE));<a name="line.1021"></a> -<span class="sourceLineNo">1022</span> t.put(p);<a name="line.1022"></a> -<span class="sourceLineNo">1023</span> // no ACL<a name="line.1023"></a> -<span class="sourceLineNo">1024</span> p = new Put(TEST_ROW)<a name="line.1024"></a> -<span class="sourceLineNo">1025</span> .addColumn(TEST_FAMILY, TEST_Q3, ZERO)<a name="line.1025"></a> -<span class="sourceLineNo">1026</span> .addColumn(TEST_FAMILY, TEST_Q4, ZERO);<a name="line.1026"></a> -<span class="sourceLineNo">1027</span> t.put(p);<a name="line.1027"></a> -<span class="sourceLineNo">1028</span> }<a name="line.1028"></a> -<span class="sourceLineNo">1029</span> return null;<a name="line.1029"></a> -<span class="sourceLineNo">1030</span> }<a name="line.1030"></a> -<span class="sourceLineNo">1031</span> }, USER_OWNER);<a name="line.1031"></a> -<span class="sourceLineNo">1032</span><a name="line.1032"></a> -<span class="sourceLineNo">1033</span> // check that a scan over the test data returns the expected number of KVs<a name="line.1033"></a> -<span class="sourceLineNo">1034</span><a name="line.1034"></a> -<span class="sourceLineNo">1035</span> final List<Cell> scanResults = Lists.newArrayList();<a name="line.1035"></a> -<span class="sourceLineNo">1036</span><a name="line.1036"></a> -<span class="sourceLineNo">1037</span> AccessTestAction scanAction = new AccessTestAction() {<a name="line.1037"></a> -<span class="sourceLineNo">1038</span> @Override<a name="line.1038"></a> -<span class="sourceLineNo">1039</span> public List<Cell> run() throws Exception {<a name="line.1039"></a> -<span class="sourceLineNo">1040</span> Scan scan = new Scan();<a name="line.1040"></a> -<span class="sourceLineNo">1041</span> scan.setStartRow(TEST_ROW);<a name="line.1041"></a> -<span class="sourceLineNo">1042</span> scan.setStopRow(Bytes.add(TEST_ROW, new byte[]{ 0 } ));<a name="line.1042"></a> -<span class="sourceLineNo">1043</span> scan.addFamily(TEST_FAMILY);<a name="line.1043"></a> -<span class="sourceLineNo">1044</span> Connection connection = ConnectionFactory.createConnection(conf);<a name="line.1044"></a> -<span class="sourceLineNo">1045</span> Table t = connection.getTable(TEST_TABLE.getTableName());<a name="line.1045"></a> -<span class="sourceLineNo">1046</span> try {<a name="line.1046"></a> -<span class="sourceLineNo">1047</span> ResultScanner scanner = t.getScanner(scan);<a name="line.1047"></a> -<span class="sourceLineNo">1048</span> Result result = null;<a name="line.1048"></a> -<span class="sourceLineNo">1049</span> do {<a name="line.1049"></a> -<span class="sourceLineNo">1050</span> result = scanner.next();<a name="line.1050"></a> -<span class="sourceLineNo">1051</span> if (result != null) {<a name="line.1051"></a> -<span class="sourceLineNo">1052</span> scanResults.addAll(result.listCells());<a name="line.1052"></a> -<span class="sourceLineNo">1053</span> }<a name="line.1053"></a> -<span class="sourceLineNo">1054</span> } while (result != null);<a name="line.1054"></a> -<span class="sourceLineNo">1055</span> } finally {<a name="line.1055"></a> -<span class="sourceLineNo">1056</span> t.close();<a name="line.1056"></a> -<span class="sourceLineNo">1057</span> connection.close();<a name="line.1057"></a> -<span class="sourceLineNo">1058</span> }<a name="line.1058"></a> -<span class="sourceLineNo">1059</span> return scanResults;<a name="line.1059"></a> -<span class="sourceLineNo">1060</span> }<a name="line.1060"></a> -<span class="sourceLineNo">1061</span> };<a name="line.1061"></a> -<span class="sourceLineNo">1062</span><a name="line.1062"></a> -<span class="sourceLineNo">1063</span> // owner will see all values<a name="line.1063"></a> -<span class="sourceLineNo">1064</span> scanResults.clear();<a name="line.1064"></a> -<span class="sourceLineNo">1065</span> verifyAllowed(scanAction, USER_OWNER);<a name="line.1065"></a> -<span class="sourceLineNo">1066</span> assertEquals(4, scanResults.size());<a name="line.1066"></a> -<span class="sourceLineNo">1067</span><a name="line.1067"></a> -<span class="sourceLineNo">1068</span> // other user will also see 4 values<a name="line.1068"></a> -<span class="sourceLineNo">1069</span> // if cell filtering was active, we would only see 2 values<a name="line.1069"></a> -<span class="sourceLineNo">1070</span> scanResults.clear();<a name="line.1070"></a> -<span class="sourceLineNo">1071</span> verifyAllowed(scanAction, USER_NONE);<a name="line.1071"></a> -<span class="sourceLineNo">1072</span> assertEquals(4, scanResults.size());<a name="line.1072"></a> -<span class="sourceLineNo">1073</span> }<a name="line.1073"></a> -<span class="sourceLineNo">1074</span><a name="line.1074"></a> -<span class="sourceLineNo">1075</span>}<a name="line.1075"></a> +<span class="sourceLineNo">864</span> // preFlush<a name="line.864"></a> +<span class="sourceLineNo">865</span> verifyAllowed(new AccessTestAction() {<a name="line.865"></a> +<span class="sourceLineNo">866</span> @Override<a name="line.866"></a> +<span class="sourceLineNo">867</span> public Object run() throws Exception {<a name="line.867"></a> +<span class="sourceLineNo">868</span> ACCESS_CONTROLLER.preFlush(ObserverContext.createAndPrepare(RCP_ENV, null));<a name="line.868"></a> +<span class="sourceLineNo">869</span> return null;<a name="line.869"></a> +<span class="sourceLineNo">870</span> }<a name="line.870"></a> +<span class="sourceLineNo">871</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.871"></a> +<span class="sourceLineNo">872</span><a name="line.872"></a> +<span class="sourceLineNo">873</span> // preGetOp<a name="line.873"></a> +<span class="sourceLineNo">874</span> verifyAllowed(new AccessTestAction() {<a name="line.874"></a> +<span class="sourceLineNo">875</span> @Override<a name="line.875"></a> +<span class="sourceLineNo">876</span> public Object run() throws Exception {<a name="line.876"></a> +<span class="sourceLineNo">877</span> List<Cell> cells = Lists.newArrayList();<a name="line.877"></a> +<span class="sourceLineNo">878</span> ACCESS_CONTROLLER.preGetOp(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.878"></a> +<span class="sourceLineNo">879</span> new Get(TEST_ROW), cells);<a name="line.879"></a> +<span class="sourceLineNo">880</span> return null;<a name="line.880"></a> +<span class="sourceLineNo">881</span> }<a name="line.881"></a> +<span class="sourceLineNo">882</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.882"></a> +<span class="sourceLineNo">883</span><a name="line.883"></a> +<span class="sourceLineNo">884</span> // preExists<a name="line.884"></a> +<span class="sourceLineNo">885</span> verifyAllowed(new AccessTestAction() {<a name="line.885"></a> +<span class="sourceLineNo">886</span> @Override<a name="line.886"></a> +<span class="sourceLineNo">887</span> public Object run() throws Exception {<a name="line.887"></a> +<span class="sourceLineNo">888</span> ACCESS_CONTROLLER.preExists(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.888"></a> +<span class="sourceLineNo">889</span> new Get(TEST_ROW), true);<a name="line.889"></a> +<span class="sourceLineNo">890</span> return null;<a name="line.890"></a> +<span class="sourceLineNo">891</span> }<a name="line.891"></a> +<span class="sourceLineNo">892</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.892"></a> +<span class="sourceLineNo">893</span><a name="line.893"></a> +<span class="sourceLineNo">894</span> // prePut<a name="line.894"></a> +<span class="sourceLineNo">895</span> verifyAllowed(new AccessTestAction() {<a name="line.895"></a> +<span class="sourceLineNo">896</span> @Override<a name="line.896"></a> +<span class="sourceLineNo">897</span> public Object run() throws Exception {<a name="line.897"></a> +<span class="sourceLineNo">898</span> ACCESS_CONTROLLER.prePut(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.898"></a> +<span class="sourceLineNo">899</span> new Put(TEST_ROW), new WALEdit(), Durability.USE_DEFAULT);<a name="line.899"></a> +<span class="sourceLineNo">900</span> return null;<a name="line.900"></a> +<span class="sourceLineNo">901</span> }<a name="line.901"></a> +<span class="sourceLineNo">902</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.902"></a> +<span class="sourceLineNo">903</span><a name="line.903"></a> +<span class="sourceLineNo">904</span> // preDelete<a name="line.904"></a> +<span class="sourceLineNo">905</span> verifyAllowed(new AccessTestAction() {<a name="line.905"></a> +<span class="sourceLineNo">906</span> @Override<a name="line.906"></a> +<span class="sourceLineNo">907</span> public Object run() throws Exception {<a name="line.907"></a> +<span class="sourceLineNo">908</span> ACCESS_CONTROLLER.preDelete(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.908"></a> +<span class="sourceLineNo">909</span> new Delete(TEST_ROW), new WALEdit(), Durability.USE_DEFAULT);<a name="line.909"></a> +<span class="sourceLineNo">910</span> return null;<a name="line.910"></a> +<span class="sourceLineNo">911</span> }<a name="line.911"></a> +<span class="sourceLineNo">912</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.912"></a> +<span class="sourceLineNo">913</span><a name="line.913"></a> +<span class="sourceLineNo">914</span> // preBatchMutate<a name="line.914"></a> +<span class="sourceLineNo">915</span> verifyAllowed(new AccessTestAction() {<a name="line.915"></a> +<span class="sourceLineNo">916</span> @Override<a name="line.916"></a> +<span class="sourceLineNo">917</span> public Object run() throws Exception {<a name="line.917"></a> +<span class="sourceLineNo">918</span> ACCESS_CONTROLLER.preBatchMutate(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.918"></a> +<span class="sourceLineNo">919</span> new MiniBatchOperationInProgress<>(null, null, null, 0, 0));<a name="line.919"></a> +<span class="sourceLineNo">920</span> return null;<a name="line.920"></a> +<span class="sourceLineNo">921</span> }<a name="line.921"></a> +<span class="sourceLineNo">922</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.922"></a> +<span class="sourceLineNo">923</span><a name="line.923"></a> +<span class="sourceLineNo">924</span> // preCheckAndPut<a name="line.924"></a> +<span class="sourceLineNo">925</span> verifyAllowed(new AccessTestAction() {<a name="line.925"></a> +<span class="sourceLineNo">926</span> @Override<a name="line.926"></a> +<span class="sourceLineNo">927</span> public Object run() throws Exception {<a name="line.927"></a> +<span class="sourceLineNo">928</span> ACCESS_CONTROLLER.preCheckAndPut(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.928"></a> +<span class="sourceLineNo">929</span> TEST_ROW, TEST_FAMILY, TEST_Q1, CompareOperator.EQUAL,<a name="line.929"></a> +<span class="sourceLineNo">930</span> new BinaryComparator("foo".getBytes()), new Put(TEST_ROW), true);<a name="line.930"></a> +<span class="sourceLineNo">931</span> return null;<a name="line.931"></a> +<span class="sourceLineNo">932</span> }<a name="line.932"></a> +<span class="sourceLineNo">933</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.933"></a> +<span class="sourceLineNo">934</span><a name="line.934"></a> +<span class="sourceLineNo">935</span> // preCheckAndDelete<a name="line.935"></a> +<span class="sourceLineNo">936</span> verifyAllowed(new AccessTestAction() {<a name="line.936"></a> +<span class="sourceLineNo">937</span> @Override<a name="line.937"></a> +<span class="sourceLineNo">938</span> public Object run() throws Exception {<a name="line.938"></a> +<span class="sourceLineNo">939</span> ACCESS_CONTROLLER.preCheckAndDelete(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.939"></a> +<span class="sourceLineNo">940</span> TEST_ROW, TEST_FAMILY, TEST_Q1, CompareOperator.EQUAL,<a name="line.940"></a> +<span class="sourceLineNo">941</span> new BinaryComparator("foo".getBytes()), new Delete(TEST_ROW), true);<a name="line.941"></a> +<span class="sourceLineNo">942</span> return null;<a name="line.942"></a> +<span class="sourceLineNo">943</span> }<a name="line.943"></a> +<span class="sourceLineNo">944</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.944"></a> +<span class="sourceLineNo">945</span><a name="line.945"></a> +<span class="sourceLineNo">946</span> // preAppend<a name="line.946"></a> +<span class="sourceLineNo">947</span> verifyAllowed(new AccessTestAction() {<a name="line.947"></a> +<span class="sourceLineNo">948</span> @Override<a name="line.948"></a> +<span class="sourceLineNo">949</span> public Object run() throws Exception {<a name="line.949"></a> +<span class="sourceLineNo">950</span> ACCESS_CONTROLLER.preAppend(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.950"></a> +<span class="sourceLineNo">951</span> new Append(TEST_ROW));<a name="line.951"></a> +<span class="sourceLineNo">952</span> return null;<a name="line.952"></a> +<span class="sourceLineNo">953</span> }<a name="line.953"></a> +<span class="sourceLineNo">954</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.954"></a> +<span class="sourceLineNo">955</span><a name="line.955"></a> +<span class="sourceLineNo">956</span> // preIncrement<a name="line.956"></a> +<span class="sourceLineNo">957</span> verifyAllowed(new AccessTestAction() {<a name="line.957"></a> +<span class="sourceLineNo">958</span> @Override<a name="line.958"></a> +<span class="sourceLineNo">959</span> public Object run() throws Exception {<a name="line.959"></a> +<span class="sourceLineNo">960</span> ACCESS_CONTROLLER.preIncrement(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.960"></a> +<span class="sourceLineNo">961</span> new Increment(TEST_ROW));<a name="line.961"></a> +<span class="sourceLineNo">962</span> return null;<a name="line.962"></a> +<span class="sourceLineNo">963</span> }<a name="line.963"></a> +<span class="sourceLineNo">964</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.964"></a> +<span class="sourceLineNo">965</span><a name="line.965"></a> +<span class="sourceLineNo">966</span> // preScannerOpen<a name="line.966"></a> +<span class="sourceLineNo">967</span> verifyAllowed(new AccessTestAction() {<a name="line.967"></a> +<span class="sourceLineNo">968</span> @Override<a name="line.968"></a> +<span class="sourceLineNo">969</span> public Object run() throws Exception {<a name="line.969"></a> +<span class="sourceLineNo">970</span> ACCESS_CONTROLLER.preScannerOpen(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.970"></a> +<span class="sourceLineNo">971</span> new Scan(), mock(RegionScanner.class));<a name="line.971"></a> +<span class="sourceLineNo">972</span> return null;<a name="line.972"></a> +<span class="sourceLineNo">973</span> }<a name="line.973"></a> +<span class="sourceLineNo">974</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.974"></a> +<span class="sourceLineNo">975</span><a name="line.975"></a> +<span class="sourceLineNo">976</span> // preBulkLoadHFile<a name="line.976"></a> +<span class="sourceLineNo">977</span> verifyAllowed(new AccessTestAction() {<a name="line.977"></a> +<span class="sourceLineNo">978</span> @Override<a name="line.978"></a> +<span class="sourceLineNo">979</span> public Object run() throws Exception {<a name="line.979"></a> +<span class="sourceLineNo">980</span> List<Pair<byte[], String>> paths = Lists.newArrayList();<a name="line.980"></a> +<span class="sourceLineNo">981</span> ACCESS_CONTROLLER.preBulkLoadHFile(ObserverContext.createAndPrepare(RCP_ENV, null),<a name="line.981"></a> +<span class="sourceLineNo">982</span> paths);<a name="line.982"></a> +<span class="sourceLineNo">983</span> return null;<a name="line.983"></a> +<span class="sourceLineNo">984</span> }<a name="line.984"></a> +<span class="sourceLineNo">985</span> }, SUPERUSER, USER_ADMIN, USER_RW, USER_RO, USER_OWNER, USER_CREATE, USER_QUAL, USER_NONE);<a name="line.985"></a> +<span class="sourceLineNo">986</span><a name="line.986"></a> +<span class="sourceLineNo">987</span> }<a name="line.987"></a> +<span class="sourceLineNo">988</span><a name="line.988"></a> +<span class="sourceLineNo">989</span> @Test<a name="line.989"></a> +<span class="sourceLineNo">990</span> public void testPassiveCellPermissions() throws Exception {<a name="line.990"></a> +<span class="sourceLineNo">991</span> final Configuration conf = TEST_UTIL.getConfiguration();<a name="line.991"></a> +<span class="sourceLineNo">992</span><a name="line.992"></a> +<span class="sourceLineNo">993</span> // store two sets of values, one store with a cell level ACL, and one without<a name="line.993"></a> +<span class="sourceLineNo">994</span> verifyAllowed(new AccessTestAction() {<a name="line.994"></a> +<span class="sourceLineNo">995</span> @Override<a name="line.995"></a> +<span class="sourceLineNo">996</span> public Object run() throws Exception {<a name="line.996"></a> +<span class="sourceLineNo">997</span> try(Connection connection = ConnectionFactory.createConnection(conf);<a name="line.997"></a> +<span class="sourceLineNo">998</span> Table t = connection.getTable(TEST_TABLE.getTableName())) {<a name="line.998"></a> +<span class="sourceLineNo">999</span> Put p;<a name="line.999"></a> +<span class="sourceLineNo">1000</span> // with ro ACL<a name="line.1000"></a> +<span class="sourceLineNo">1001</span> p = new Put(TEST_ROW).addColumn(TEST_FAMILY, TEST_Q1, ZERO);<a name="line.1001"></a> +<span class="sourceLineNo">1002</span> p.setACL(USER_NONE.getShortName(), new Permission(Action.READ));<a name="line.1002"></a> +<span class="sourceLineNo">1003</span> t.put(p);<a name="line.1003"></a> +<span class="sourceLineNo">1004</span> // with rw ACL<a name="line.1004"></a> +<span class="sourceLineNo">1005</span> p = new Put(TEST_ROW).addColumn(TEST_FAMILY, TEST_Q2, ZERO);<a name="line.1005"></a> +<span class="sourceLineNo">1006</span> p.setACL(USER_NONE.getShortName(), new Permission(Action.READ, Action.WRITE));<a name="line.1006"></a> +<span class="sourceLineNo">1007</span> t.put(p);<a name="line.1007"></a> +<span class="sourceLineNo">1008</span> // no ACL<a name="line.1008"></a> +<span class="sourceLineNo">1009</span> p = new Put(TEST_ROW)<a name="line.1009"></a> +<span class="sourceLineNo">1010</span> .addColumn(TEST_FAMILY, TEST_Q3, ZERO)<a name="line.1010"></a> +<span class="sourceLineNo">1011</span> .addColumn(TEST_FAMILY, TEST_Q4, ZERO);<a name="line.1011"></a> +<span class="sourceLineNo">1012</span> t.put(p);<a name="line.1012"></a> +<span class="sourceLineNo">1013</span> }<a name="line.1013"></a> +<span class="sourceLineNo">1014</span> return null;<a name="line.1014"></a> +<span class="sourceLineNo">1015</span> }<a name="line.1015"></a> +<span class="sourceLineNo">1016</span> }, USER_OWNER);<a name="line.1016"></a> +<span class="sourceLineNo">1017</span><a name="line.1017"></a> +<span class="sourceLineNo">1018</span> // check that a scan over the test data returns the expected number of KVs<a name="line.1018"></a> +<span class="sourceLineNo">1019</span><a name="line.1019"></a> +<span class="sourceLineNo">1020</span> final List<Cell> scanResults = Lists.newArrayList();<a name="line.1020"></a> +<span class="sourceLineNo">1021</span><a name="line.1021"></a> +<span class="sourceLineNo">1022</span> AccessTestAction scanAction = new AccessTestAction() {<a name="line.1022"></a> +<span class="sourceLineNo">1023</span> @Override<a name="line.1023"></a> +<span class="sourceLineNo">1024</span> public List<Cell> run() throws Exception {<a name="line.1024"></a> +<span class="sourceLineNo">1025</span> Scan scan = new Scan();<a name="line.1025"></a> +<span class="sourceLineNo">1026</span> scan.setStartRow(TEST_ROW);<a name="line.1026"></a> +<span class="sourceLineNo">1027</span> scan.setStopRow(Bytes.add(TEST_ROW, new byte[]{ 0 } ));<a name="line.1027"></a> +<span class="sourceLineNo">1028</span> scan.addFamily(TEST_FAMILY);<a name="line.1028"></a> +<span class="sourceLineNo">1029</span> Connection connection = ConnectionFactory.createConnection(conf);<a name="line.1029"></a> +<span class="sourceLineNo">1030</span> Table t = connection.getTable(TEST_TABLE.getTableName());<a name="line.1030"></a> +<span class="sourceLineNo">1031</span> try {<a name="line.1031"></a> +<span class="sourceLineNo">1032</span> ResultScanner scanner = t.getScanner(scan);<a name="line.1032"></a> +<span class="sourceLineNo">1033</span> Result result = null;<a name="line.1033"></a> +<span class="sourceLineNo">1034</span> do {<a name="line.1034"></a> +<span class="sourceLineNo">1035</span> result = scanner.next();<a name="line.1035"></a> +<span class="sourceLineNo">1036</span> if (result != null) {<a name="line.1036"></a> +<span class="sourceLineNo">1037</span> scanResults.addAll(result.listCells());<a name="line.1037"></a> +<span class="sourceLineNo">1038</span> }<a name="line.1038"></a> +<span class="sourceLineNo">1039</span> } while (result != null);<a name="line.1039"></a> +<span class="sourceLineNo">1040</span> } finally {<a name="line.1040"></a> +<span class="sourceLineNo">1041</span> t.close();<a name="line.1041"></a> +<span class="sourceLineNo">1042</span> connection.close();<a name="line.1042"></a> +<span class="sourceLineNo">1043</span> }<a name="line.1043"></a> +<span class="sourceLineNo">1044</span> return scanResults;<a name="line.1044"></a> +<span class="sourceLineNo">1045</span> }<a name="line.1045"></a> +<span class="sourceLineNo">1046</span> };<a name="line.1046"></a> +<span class="sourceLineNo">1047</span><a name="line.1047"></a> +<span class="sourceLineNo">1048</span> // owner will see all values<a name="line.1048"></a> +<span class="sourceLineNo">1049</span> scanResults.clear();<a name="line.1049"></a> +<span class="sourceLineNo">1050</span> verifyAllowed(scanAction, USER_OWNER);<a name="line.1050"></a> +<span class="sourceLineNo">1051</span> assertEquals(4, scanResults.size());<a name="line.1051"></a> +<span class="sourceLineNo">1052</span><a name="line.1052"></a> +<span class="sourceLineNo">1053</span> // other user will also see 4 values<a name="line.1053"></a> +<span class="sourceLineNo">1054</span> // if cell filtering was active, we would only see 2 values<a name="line.1054"></a> +<span class="sourceLineNo">1055</span> scanResults.clear();<a name="line.1055"></a> +<span class="sourceLineNo">1056</span> verifyAllowed(scanAction, USER_NONE);<a name="line.1056"></a> +<span class="sourceLineNo">1057</span> assertEquals(4, scanResults.size());<a name="line.1057"></a> +<span class="sourceLineNo">1058</span> }<a name="line.1058"></a> +<span class="sourceLineNo">1059</span><a name="line.1059"></a> +<span class="sourceLineNo">1060</span>}<a name="line.1060"></a>
