[ 
https://issues.apache.org/jira/browse/HBASE-12470?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14212645#comment-14212645
 ] 

Andrew Purtell commented on HBASE-12470:
----------------------------------------

bq. Also the client should be determined to know whether it is really a 
legitmate user. A malicious client could claim to be a legitmate user and ask 
for a codec that could send across the tags.  The server should be able to 
clearly identify such cases.

That's why you'd negotiate codecs _after_ kerberos authentication.

> Way to determine which labels are applied to a cell in a table
> --------------------------------------------------------------
>
>                 Key: HBASE-12470
>                 URL: https://issues.apache.org/jira/browse/HBASE-12470
>             Project: HBase
>          Issue Type: New Feature
>          Components: security
>    Affects Versions: 0.98.6.1
>            Reporter: Kevin Odell
>
> There is currently no way to determine which labels are applied to a cell 
> without using the HFile tool to dump each HFile and then translating the 
> output back to the hbase:labels table.  This is quite tedious on larger 
> tables.  Since this could be a security risk perhaps we make it tunable with 
> hbase.superuser.can.veiw.cells or something along those lines?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to