[
https://issues.apache.org/jira/browse/HBASE-11791?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14127943#comment-14127943
]
Andrew Purtell commented on HBASE-11791:
----------------------------------------
bq. is it possible to grant cell ACLs using hbase shell?
Yes.
{code}
grant <table>, { '<user-or-group>' => '<permissions>', ... }, {
<scanner-specification> }
{code}
Where <user-or-group> is a user short name or a group using @group notation.
Where <permissions> is a string containing any or all of "RWXCA". Of course
only R and W are meaningful at cell scope.
Where <scanner-specification> is the scanner specification syntax and
conventions used by the 'scan' shell command. See scan.rb for some examples of
scanner specifications.
Here is an example from the HBaseCon 2014 presentation, which grants the
'developers' group and 'testuser' user read-write and read permissions,
respectively, on a subset of the "pii" column of the 'user' table:
{code}
hbase> grant 'user', \
{ '@developers' => 'RW', 'testuser' => 'R' }, \
{ COLUMNS => 'pii', FILTER => "(PrefixFilter ('test'))" }
{code}
The shell will run a scanner with the given criteria, rewrite the found cells
with new ACLs, and store them back to their exact coordinates.
> Update docs on visibility tags and ACLs, transparent encryption, secure bulk
> upload
> -----------------------------------------------------------------------------------
>
> Key: HBASE-11791
> URL: https://issues.apache.org/jira/browse/HBASE-11791
> Project: HBase
> Issue Type: Task
> Components: documentation
> Reporter: Misty Stanley-Jones
> Assignee: Misty Stanley-Jones
> Attachments: HBASE-11791-v1.patch, HBASE-11791-v2.patch,
> HBASE-11791-v3.patch, HBASE-11791-v4.patch, HBASE-11791-v5.patch,
> HBASE-11791-v6.patch, HBASE-11791-v7.patch, HBase Security Features Operators
> Guide - HBaseCon 2014 - v5.pptx, LDAPScanLabelGenerator.png
>
>
> Do a pass on the ACL and tag docs and make sure they are up to date and
> accurate, expand to cover HBASE-10885, HBASE-11001, HBASE-11002, HBASE-11434
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
