Github user ijokarumawak commented on the issue:
https://github.com/apache/nifi/pull/2518
@MikeThomsen @bbende HBase allows user to set visibility label expression
using labels those are not associated to the user by default. There is a server
side configuration to strict this
`hbase.security.visibility.mutations.checkauths`.
I am not familiar with Accumulo behavior but there was a mention about the
difference between Accumulo and HBase.
> The deletes happen based on pattern matching. If suppose a Cell has
SECRET&TOPSECRET as the visibility expression then any delete coming with the
same expression is matched for, but TOPSECRET&SECRET is also considered to be
same
> A&B<=>B&A
> A|B<=>B|A.
> This is the difference between what Accumulo does in terms of delete
where only the exact match is looked out for.
https://issues.apache.org/jira/browse/HBASE-10885?focusedCommentId=14053522&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-14053522
---
