Aneela,

Perhaps because the policy allows for column ‘name’:
  >> Where HBase Table is 'emp', HBase column family is 'f' and HBase column is 
'name', on which this policy is applied.

But the put was for column ‘age’?
  >> put 'emp','1','f:age','18'

Can you please check the audit log, for the policy that denied the access?

Thanks,
Madhan


From:  Aneela Saleem <[email protected]>
Reply-To:  "[email protected]" <[email protected]>
Date:  Thursday, December 10, 2015 at 12:48 PM
To:  "[email protected]" <[email protected]>
Subject:  HBase test cases

Hi all, 

Here are my test cases for HBase plugin. I have some confusions regarding write 
access to different users/groups. 

Following is my concerned Policy:


​
Where HBase Table is 'emp', HBase column family is 'f' and HBase column is 
'name', on which this policy is applied.

Following are my test cases:


Test_IDUserGroupCommandExpectedActualPolicy
1RogerDevelopersscan 'emp'AllowedAllowedRanger
2RogerDevelopersput 'emp','1','f:age','18'AllowedDeniedRanger
3SmithDevelopersput 'emp','1','f:age','18'DeniedDeniedRanger
4SmithDevelopersscan 'emp'DeniedDeniedranger
5ClarkData-ScientistScan 'emp'AllowedAllowedRanger
6ClarkData-Scientistput 'emp','1','f:age','10'AllowedDeniedRanger
7MikeData-Scientistput 'emp','1','f:age','10'DeniedDeniedRanger
8MikeData-ScientistScan 'emp'AllowedAllowedRanger



Can anyone please explain why in Test_Id_(2,6) the actual result is 'Denied'? 
(IMO it sould be 'Allowed')

Reply via email to