[
https://issues.apache.org/jira/browse/HBASE-11251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14008596#comment-14008596
]
ramkrishna.s.vasudevan commented on HBASE-11251:
------------------------------------------------
bq.Any reason why the specific CF grant is changed in this patch?
CF grant permission is not needed here. It was done previously. But while
testing I found specifically we need not grant permission on the CF level.
Also there is only one CF in the test.
bq.The table is just used to get the tabelName which we already have. We can
avoid this HTable creation and so the close in finally. This is there in 2
places in the patch.
Ok. I just ensured the close had to be done which was not done in the existing
code.
> LoadTestTool should grant READ permission for the users that are given READ
> access for specific cells
> -----------------------------------------------------------------------------------------------------
>
> Key: HBASE-11251
> URL: https://issues.apache.org/jira/browse/HBASE-11251
> Project: HBase
> Issue Type: Bug
> Affects Versions: 0.98.2
> Reporter: ramkrishna.s.vasudevan
> Assignee: ramkrishna.s.vasudevan
> Fix For: 0.99.0, 0.98.3
>
> Attachments: HBASE-11251_0.98.patch, HBASE-11251_trunk.patch
>
>
> In 0.98.2 onwards the AccessControlFilter
> {code}
> case CHECK_CELL_FIRST: {
> LOG.info("Am coming here for cell first strategy");
> if (authManager.authorize(user, table, cell, Permission.Action.READ)
> &&
> authManager.authorize(user, table, family, qualifier,
> Permission.Action.READ)) {
> LOG.info("Returning include");
> return ReturnCode.INCLUDE;
> }
> {code}
> expects a READ permission on the table for those Users that are granted READ
> permission on the cell level.
> In 0.98.1
> {code}
> if (authManager.authorize(user, table, cell, cellFirstStrategy,
> Permission.Action.READ)) {
> return ReturnCode.INCLUDE;
> }
> {code}
> So from 0.98.2 onwards IntegrationTestIngestWithACL was failing. Hence this
> JIRA is targeted to correct the behaviour and make the IT work again.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
