Anoop Sam John created HBASE-10860:
--------------------------------------
Summary: Insufficient AccessController covering permission check
Key: HBASE-10860
URL: https://issues.apache.org/jira/browse/HBASE-10860
Project: HBase
Issue Type: Bug
Components: security
Affects Versions: 0.98.0
Reporter: Anoop Sam John
Assignee: Anoop Sam John
Priority: Critical
Fix For: 0.99.0, 0.98.2
{code}
List<Cell> list = (List<Cell>)entry.getValue();
if (list == null || list.isEmpty()) {
get.addFamily(col);
} else {
for (Cell cell : list) {
get.addColumn(col, CellUtil.cloneQualifier(cell));
}
}
{code}
When a delete family Mutation comes, a Cell will be added into the list with
Qualifier as null. (See Delete#deleteFamily(byte[])). So it will miss getting
added against the check list == null || list.isEmpty(). We will fail getting
the cells under this cf for covering permission check.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
