[
https://issues.apache.org/jira/browse/HBASE-12302?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14177649#comment-14177649
]
Jerry He commented on HBASE-12302:
----------------------------------
Attached a patch that seems to fix the problem.
After the patch:
{code}
hbase(main):001:0> get_auths 'user2'
ERROR: org.apache.hadoop.hbase.security.AccessDeniedException: User 'biadmin is
not authorized to perform this action.
{code}
The java client also propagates the correct exception.
> VisibilityClient getAuths does not propagate remote service exception
> correctly
> -------------------------------------------------------------------------------
>
> Key: HBASE-12302
> URL: https://issues.apache.org/jira/browse/HBASE-12302
> Project: HBase
> Issue Type: Bug
> Components: Client, security
> Affects Versions: 2.0.0, 0.98.7
> Reporter: Jerry He
> Assignee: Jerry He
> Priority: Minor
> Fix For: 2.0.0, 0.98.8
>
> Attachments: HBASE-12302-master.patch
>
>
> From hbase shell, run 'get_auths' with a non-superuser:
> {code}
> hbase(main):002:0> get_auths 'user2'
> ERROR:
> Here is some help for this command:
> Get the visibility labels set for a particular user
> Syntax : get_auths 'user1'
> For example:
> hbase> get_auths 'user1'
> {code}
> We should expect a AccessDeniedException from the server.
> From a Java client, AccessDeniedException was dumped out, but the end
> exception is
> {code}
> java.util.NoSuchElementException
> at java.util.TreeMap$PrivateEntryIterator.nextEntry(TreeMap.java:1124)
> at java.util.TreeMap$ValueIterator.next(TreeMap.java:1171)
> at
> org.apache.hadoop.hbase.security.visibility.VisibilityClient.getAuths(VisibilityClient.java:148)
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
