Anoop Sam John created HBASE-11117:
--------------------------------------

             Summary: [AccessController] checkAndPut/Delete hook should check 
only Read permission
                 Key: HBASE-11117
                 URL: https://issues.apache.org/jira/browse/HBASE-11117
             Project: HBase
          Issue Type: Bug
          Components: security
    Affects Versions: 0.98.0
            Reporter: Anoop Sam John
            Assignee: Anoop Sam John
             Fix For: 0.99.0, 0.98.3


We check for Read and Write permissions in checkAndPut/Delete hooks. Here we 
check for the condition part alone and so can check for Read permission alone. 
Later prePut/Delete hook is getting called with Put/Delete mutation and in that 
we properly check for the Write permission




--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to