[
https://issues.apache.org/jira/browse/HBASE-11251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14008961#comment-14008961
]
Ted Yu commented on HBASE-11251:
--------------------------------
This seems to cause TestTableLockManager#testTableReadLock to fail.
{code}
2014-05-26 08:15:09,392 FATAL [Thread-1] util.LoadTestTool(546): Error in
granting permission for the user user1
org.apache.hadoop.hbase.TableNotFoundException: Table 'hbase:acl' was
not found, got: TestTableLevelLocks.
at
org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.locateRegionInMeta(ConnectionManager.java:1068)
at
org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.locateRegion(ConnectionManager.java:995)
at
org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.locateRegion(ConnectionManager.java:952)
at
org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.getRegionLocation(ConnectionManager.java:793)
at org.apache.hadoop.hbase.client.HTable.getRegionLocation(HTable.java:507)
at
org.apache.hadoop.hbase.client.HTable.getKeysAndRegionsInRange(HTable.java:709)
at
org.apache.hadoop.hbase.client.HTable.getKeysAndRegionsInRange(HTable.java:681)
at org.apache.hadoop.hbase.client.HTable.getStartKeysInRange(HTable.java:1674)
at org.apache.hadoop.hbase.client.HTable.coprocessorService(HTable.java:1630)
at org.apache.hadoop.hbase.client.HTable.coprocessorService(HTable.java:1611)
at
org.apache.hadoop.hbase.security.access.AccessControlClient.grant(AccessControlClient.java:102)
at org.apache.hadoop.hbase.util.LoadTestTool.loadTable(LoadTestTool.java:544)
at org.apache.hadoop.hbase.util.LoadTestTool.doWork(LoadTestTool.java:457)
at
org.apache.hadoop.hbase.util.AbstractHBaseTool.run(AbstractHBaseTool.java:112)
at
org.apache.hadoop.hbase.master.TestTableLockManager.testTableReadLock(TestTableLockManager.java:337)
{code}
When security is not enabled, permission granting shouldn't be done.
> LoadTestTool should grant READ permission for the users that are given READ
> access for specific cells
> -----------------------------------------------------------------------------------------------------
>
> Key: HBASE-11251
> URL: https://issues.apache.org/jira/browse/HBASE-11251
> Project: HBase
> Issue Type: Bug
> Affects Versions: 0.98.2
> Reporter: ramkrishna.s.vasudevan
> Assignee: ramkrishna.s.vasudevan
> Fix For: 0.99.0, 0.98.3
>
> Attachments: HBASE-11251_0.98.patch, HBASE-11251_0.98_1.patch,
> HBASE-11251_trunk.patch, HBASE-11251_trunk_1.patch
>
>
> In 0.98.2 onwards the AccessControlFilter
> {code}
> case CHECK_CELL_FIRST: {
> LOG.info("Am coming here for cell first strategy");
> if (authManager.authorize(user, table, cell, Permission.Action.READ)
> &&
> authManager.authorize(user, table, family, qualifier,
> Permission.Action.READ)) {
> LOG.info("Returning include");
> return ReturnCode.INCLUDE;
> }
> {code}
> expects a READ permission on the table for those Users that are granted READ
> permission on the cell level.
> In 0.98.1
> {code}
> if (authManager.authorize(user, table, cell, cellFirstStrategy,
> Permission.Action.READ)) {
> return ReturnCode.INCLUDE;
> }
> {code}
> So from 0.98.2 onwards IntegrationTestIngestWithACL was failing. Hence this
> JIRA is targeted to correct the behaviour and make the IT work again.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
