[
https://issues.apache.org/jira/browse/HBASE-11251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14009282#comment-14009282
]
ramkrishna.s.vasudevan commented on HBASE-11251:
------------------------------------------------
One issue with the addendum is that the setup would work only under Kerberos
and not with simple authentication. So the Integration tests run without
kerberos will not work.
Had the userNames
{code}
private String userNames = "user1, user2, user3, user4";
{code}
been initialized to null then this would not have happened because the code was
under
{code}
if (userNames != null) {
{code}
> LoadTestTool should grant READ permission for the users that are given READ
> access for specific cells
> -----------------------------------------------------------------------------------------------------
>
> Key: HBASE-11251
> URL: https://issues.apache.org/jira/browse/HBASE-11251
> Project: HBase
> Issue Type: Bug
> Affects Versions: 0.98.2
> Reporter: ramkrishna.s.vasudevan
> Assignee: ramkrishna.s.vasudevan
> Fix For: 0.99.0, 0.98.3
>
> Attachments: HBASE-11251-addendum-0.98.patch,
> HBASE-11251-addendum-trunk.patch, HBASE-11251_0.98.patch,
> HBASE-11251_0.98_1.patch, HBASE-11251_trunk.patch, HBASE-11251_trunk_1.patch
>
>
> In 0.98.2 onwards the AccessControlFilter
> {code}
> case CHECK_CELL_FIRST: {
> LOG.info("Am coming here for cell first strategy");
> if (authManager.authorize(user, table, cell, Permission.Action.READ)
> &&
> authManager.authorize(user, table, family, qualifier,
> Permission.Action.READ)) {
> LOG.info("Returning include");
> return ReturnCode.INCLUDE;
> }
> {code}
> expects a READ permission on the table for those Users that are granted READ
> permission on the cell level.
> In 0.98.1
> {code}
> if (authManager.authorize(user, table, cell, cellFirstStrategy,
> Permission.Action.READ)) {
> return ReturnCode.INCLUDE;
> }
> {code}
> So from 0.98.2 onwards IntegrationTestIngestWithACL was failing. Hence this
> JIRA is targeted to correct the behaviour and make the IT work again.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
