Geoffrey Jacoby created PHOENIX-5785:
----------------------------------------
Summary: Remove TTL check in QueryCompiler when doing an SCN /
Lookback query
Key: PHOENIX-5785
URL: https://issues.apache.org/jira/browse/PHOENIX-5785
Project: Phoenix
Issue Type: Bug
Reporter: Geoffrey Jacoby
As a sanity check, the Phoenix client verifies that SCN for a query is not
before the TTL of any table involved in the query. This causes problems if
access control is enabled and the current user doesn't have ADMIN or CREATE
privileges, because HBase requires schema-altering privileges to _read_ the
full schema in getTableDescriptor.
According to the HBase community, this is because sensitive config parameters
can be stored in table descriptor properties, such as those used in HBase
encryption. See HBASE-24018, HBASE-8692, and HBASE-9182 for previous
discussion, and PHOENIX-5750 for a previous instance where this has affected
Phoenix.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
