hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Anoop Sam John (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-10173) Need HFile version check in security coprocessors
Date Wed, 18 Dec 2013 03:32:07 GMT

    [ https://issues.apache.org/jira/browse/HBASE-10173?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13851312#comment-13851312
] 

Anoop Sam John commented on HBASE-10173:
----------------------------------------

bq.I can take this Anoop, let me know.
NP.. Pls go ahead Andy.

I am just attaching the patch I had initially which checks only in VisibilityController.

bq.We need this in the AC too after HBASE-7662
In 0.98 HFile V2 is the default version. If used want to use old way of AccessControl (Not
cell level) still he has to make the version to V3? I think the changes happened with AccessController
demands us to do so. We can document this change then, some where in 0.98 release contents.

> Need HFile version check in security coprocessors
> -------------------------------------------------
>
>                 Key: HBASE-10173
>                 URL: https://issues.apache.org/jira/browse/HBASE-10173
>             Project: HBase
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 0.98.0, 0.99.0
>            Reporter: Anoop Sam John
>            Assignee: Anoop Sam John
>            Priority: Critical
>             Fix For: 0.98.0, 0.99.0
>
>
> Cell level visibility labels are stored as cell tags. So HFile V3 is the minimum version
which can support this feature. Better to have a version check in VisibilityController. Some
one using this CP but with any HFile version as V2, we can better throw error.



--
This message was sent by Atlassian JIRA
(v6.1.4#6159)

Mime
View raw message