[
https://issues.apache.org/jira/browse/HBASE-11001?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andrew Purtell updated HBASE-11001:
-----------------------------------
Status: Patch Available (was: Open)
Tested manually. Created a table with two families with owner "hbase". Added
values to each family in two rows (4 values total). Scan of table with user
"test" returns 0 cells. With new variation of the grant command, granted 'R'
permission to only one CF to user "test" using a prefix filter that selects
only one row. Scan of table afterward returns one cell from the appropriate
family as expected.
I also confirmed global, table, and column family grants still work.
> Shell support for granting cell permissions for testing
> -------------------------------------------------------
>
> Key: HBASE-11001
> URL: https://issues.apache.org/jira/browse/HBASE-11001
> Project: HBase
> Issue Type: Improvement
> Reporter: Andrew Purtell
> Assignee: Andrew Purtell
> Priority: Minor
> Fix For: 0.99.0, 0.98.2
>
> Attachments: 11001.patch, HBASE-11001.patch
>
>
> For testing purposes it would be useful if the shell can support a simple
> syntax for adding cell ACLs to existing cells. Consider a combination of
> current 'grant' and 'scan' commands.
> {noformat}
> grant <table>, <permissions>, <scan>
> {noformat}
> where <table> is a string, a table name, optionally prefixed with a namespace
> where <permissions> is a Hash type that maps permissions to users, for
> example: \\
> - { "user1" => "RW", "user2" => "R", "@group1" => "R" }
> where <scan> is a Hash type containing a scanner specification, for example
> (borrowed from scan.rb): \\
> - { COLUMNS => 'c1', STARTROW => 'abc', ENDROW => 'xyz' }
> - { COLUMNS => 'c1', TIMERANGE => [123, 456] }
> - { COLUMNS => ['c1', 'c2'], FILTER => "(PrefixFilter ('foo') AND
> (QualifierFilter (=, 'bar:'))) AND (TimestampsFilter (123, 456))" }
--
This message was sent by Atlassian JIRA
(v6.2#6252)
