Return-Path: X-Original-To: apmail-hbase-dev-archive@www.apache.org Delivered-To: apmail-hbase-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id F1F1110585 for ; Thu, 17 Oct 2013 16:43:47 +0000 (UTC) Received: (qmail 43636 invoked by uid 500); 17 Oct 2013 16:43:45 -0000 Delivered-To: apmail-hbase-dev-archive@hbase.apache.org Received: (qmail 43550 invoked by uid 500); 17 Oct 2013 16:43:44 -0000 Mailing-List: contact dev-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@hbase.apache.org Delivered-To: mailing list dev@hbase.apache.org Received: (qmail 43532 invoked by uid 99); 17 Oct 2013 16:43:43 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 17 Oct 2013 16:43:43 +0000 Date: Thu, 17 Oct 2013 16:43:43 +0000 (UTC) From: "Andrew Purtell (JIRA)" To: dev@hbase.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (HBASE-7661) [Per-KV security] Store and apply per cell ACLs in a shadow CF MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-7661?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Purtell resolved HBASE-7661. ----------------------------------- Resolution: Won't Fix Now that we have tags and HFile V3, it's not necessary to use out of line storage for cell ACLs. Resolving as wontfix. > [Per-KV security] Store and apply per cell ACLs in a shadow CF > -------------------------------------------------------------- > > Key: HBASE-7661 > URL: https://issues.apache.org/jira/browse/HBASE-7661 > Project: HBase > Issue Type: Sub-task > Components: Coprocessors, security > Reporter: Andrew Purtell > Assignee: Andrew Purtell > Attachments: 7661-0.94.patch, 7661.patch > > > Coprocessor based implementation of per-KV security that extends the existing AccessController and ACL model to cover per cell permissions. More comments on this approach can be found on the parent issue. Stores and consults the additional metadata in a shadow column family managed by the AccessController. Preserves existing user facing semantics. Does not require any changes to core code except, optionally, the security shell commands, for testing and prototyping convenience. -- This message was sent by Atlassian JIRA (v6.1#6144)