Mailing-List: contact user-help@accumulo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@accumulo.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAGZGg1hja4HzZrS0L3Vtw+w5awpTDZj8JM+N+KKEdSf_CgyBzA@mail.gmail.com>
References: 
 <CAC7UcBYPgXYA6nxk3BEeybo4xCYuf3S+qKeM1rQJcENn=N-96A@mail.gmail.com>
	<CAGZGg1gGusqkZis1Qffmf0SF_Ak9tkeSV0Vxv4gRSrEB3p0fQw@mail.gmail.com>
	<CAC7UcBbEweyvgHAgWmUhqy0x3jqnbUOiZ6_o58tboty1A+5Qpw@mail.gmail.com>
	<CAGZGg1hja4HzZrS0L3Vtw+w5awpTDZj8JM+N+KKEdSf_CgyBzA@mail.gmail.com>
Date: Mon, 30 Dec 2013 17:50:20 -0500
Message-ID: 
 <CAL5zq9ZvAJsZDLD-s0jRmbfSBZG-Wn_KGRHXUA4EUtKpeRmh4g@mail.gmail.com>
Subject: Re: when a security token is compromised?
From: Christopher <ctubbsii@apache.org>
To: user@accumulo.apache.org
Content-Type: text/plain; charset=UTF-8

To be clear, Accumulo also has per-user security tokens, which are
tied to the user, not the data. These are used for user
authentication. Once a user is authenticated, the labels on the data
are used for filtering the data for that user's authorizations.

--
Christopher L Tubbs II
http://gravatar.com/ctubbsii


On Mon, Dec 16, 2013 at 5:02 PM, Michael Allen <michael@sqrrl.com> wrote:
> You got it.  :)
>
>
> On Mon, Dec 16, 2013 at 4:56 PM, Sujee Maniyam <sujee@sujee.net> wrote:
>>
>>
>> On Mon, Dec 16, 2013 at 1:40 PM, Michael Allen <michael@sqrrl.com> wrote:
>>>
>>> Hi Sujee, I'm not exactly following you when you are talking about a
>>> "security token".  Are you maybe referring to the visibility labels within
>>> the cell level security feature of Accumulo?
>>
>>
>> yes, I meant the  cell level 'visibility token'
>>
>> So I guess, that kind of answers my question :-)
>> These are not super-secret tokens... just visibility levels.
>> Admins grants the visibility levels  per user , to control access
>>
>>
>