[
https://issues.apache.org/jira/browse/HBASE-15218?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anoop Sam John updated HBASE-15218:
-----------------------------------
Release Note:
This issue fixes
- In case of normal WAL (Not encrypted) we were loosing all cell tags on WAL
replay after an RS crash
- In case of encrypted WAL we were not even persisting Cell tags in WAL. Tags
from all unflushed (to HFile) Cells will get lost even after WAL replay
recovery is done.
As we use tags for Cell level security, this fixes 2 security issues
- Cell level visibility labels security breach . Making a visibility
restricted cell global readable
- Cell level ACL availability issue. A user who is cell level authorized to
read this cell can not read it. It is a data loss for him.
was:
This issue fixes
- In case of normal WAL (Not encrypted) we were loosing all cell tags on WAL
replay after an RS crash
- In case of encrypted WAL we were not even persisting Cell tags in WAL. Tags
from all unflushed (to HFile) Cells will get lost even after WAL replay
recovery is done.
> On RS crash and replay of WAL, loosing all Tags in Cells
> --------------------------------------------------------
>
> Key: HBASE-15218
> URL: https://issues.apache.org/jira/browse/HBASE-15218
> Project: HBase
> Issue Type: Bug
> Components: Recovery, regionserver, security
> Affects Versions: 2.0.0, 0.98.13, 1.0.2, 1.2.0, 1.1.1
> Reporter: Anoop Sam John
> Assignee: Anoop Sam John
> Priority: Blocker
> Labels: needs_releasenote
> Fix For: 2.0.0, 1.2.0, 1.3.0, 1.1.4, 1.0.4, 0.98.18
>
> Attachments: HBASE-15218-0.98.patch, HBASE-15218-branch-1.1.patch,
> HBASE-15218-branch-1.2.patch, HBASE-15218.patch
>
>
> The KeyValueCodec's Decoder makes NoTagsKeyValue. The WalCellCodec also makes
> this Decoder and so while reading Cells after RS crash, we will loose all
> tags in Cells. (While writing to WAL using WALCellCodec, we are preserving
> Cell tags.)
> In case of SecureWALCellCodec, we are not even writing Cell tags to WAL.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
