[
https://issues.apache.org/jira/browse/HBASE-10860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13950593#comment-13950593
]
Anoop Sam John commented on HBASE-10860:
----------------------------------------
No exceptions in the mentioned line Ram.. Just thing is that, it adds a column
<cf>:<emptyQ> into the Get. Actually we have to get all the cells under the
family (for the given row) as the delete is going to mask all.
> Insufficient AccessController covering permission check
> -------------------------------------------------------
>
> Key: HBASE-10860
> URL: https://issues.apache.org/jira/browse/HBASE-10860
> Project: HBase
> Issue Type: Bug
> Components: security
> Affects Versions: 0.98.0
> Reporter: Anoop Sam John
> Assignee: Anoop Sam John
> Priority: Critical
> Fix For: 0.99.0, 0.98.2
>
> Attachments: HBASE-10860.patch
>
>
> {code}
> List<Cell> list = (List<Cell>)entry.getValue();
> if (list == null || list.isEmpty()) {
> get.addFamily(col);
> } else {
> for (Cell cell : list) {
> get.addColumn(col, CellUtil.cloneQualifier(cell));
> }
> }
> {code}
> When a delete family Mutation comes, a Cell will be added into the list with
> Qualifier as null. (See Delete#deleteFamily(byte[])). So it will miss getting
> added against the check list == null || list.isEmpty(). We will fail getting
> the cells under this cf for covering permission check.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
