[ 
https://issues.apache.org/jira/browse/HBASE-11318?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14027081#comment-14027081
 ] 

Enis Soztutar commented on HBASE-11318:
---------------------------------------

 - UserProvider.java does not have the annotation. 
 In HBASE-10671 I had set the Permission classes as Public, thinking that they 
are being used by clients. But it does not seem to be the case. 
AccessControlClient, which is client-facing, accepts raw PB objects directly. 
We may need to change that (in another issue). 
{code}
  public static GrantResponse grant(Configuration conf, final TableName 
tableName,
      final String userName, final byte[] family, final byte[] qual,
      final AccessControlProtos.Permission.Action... actions) throws Throwable
{code}


> Classes in security subpackages missing @InterfaceAudience annotations.
> -----------------------------------------------------------------------
>
>                 Key: HBASE-11318
>                 URL: https://issues.apache.org/jira/browse/HBASE-11318
>             Project: HBase
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.99.0, 0.96.1.1, 0.98.3
>            Reporter: Jonathan Hsieh
>            Assignee: Jonathan Hsieh
>             Fix For: 0.99.0, 0.98.4
>
>         Attachments: hbase-11318.patch
>
>
> I was reading some of the security related code and noticed that many of the 
> security related classes lack @InterfaceAudience markings.
> WIth the current api I believe all but Permission should be Private.  With 
> the introduction of cell level ACL's Permission must be public because it is 
> now exposed in the Mutation setACL calls[1].  
> There is an inconsistency with the Mutation ACL -- the acl setters take 
> Permission instances but the getter returns byte[]'s.  As a follow on issue 
> we could change the signature of Mutation.setACL so we don't have to expose 
> the Permission class and convert it to be byte[], or change the getter to 
> return an exposed Permission instance.
> [1] 
> http://hbase.apache.org/devapidocs/org/apache/hadoop/hbase/client/Mutation.html#setACL(java.util.Map)



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to