Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Mon, 13 Jan 2014 20:17:10 +0000 (UTC)
From: "Hudson (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12688495.1389587377420.88832.1389644230428@arcas>
In-Reply-To: <JIRA.12688495.1389587377420@arcas>
References: <JIRA.12688495.1389587377420@arcas>
Subject: [jira] [Commented] (HBASE-10326) Super user should be able scan all
 the cells irrespective of the visibility labels
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HBASE-10326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13869920#comment-13869920 ] 

Hudson commented on HBASE-10326:
--------------------------------

SUCCESS: Integrated in HBase-TRUNK #4810 (See [https://builds.apache.org/job/HBase-TRUNK/4810/])
HBASE-10326 Super user should be able scan all the cells irrespective of the visibility labels(Ram) (anoopsamjohn: rev 1557792)
* /hbase/trunk/hbase-server/src/main/java/org/apache/hadoop/hbase/security/visibility/VisibilityController.java
* /hbase/trunk/hbase-server/src/test/java/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabels.java
* /hbase/trunk/hbase-server/src/test/java/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabelsWithACL.java


> Super user should be able scan all the cells irrespective of the visibility labels
> ----------------------------------------------------------------------------------
>
>                 Key: HBASE-10326
>                 URL: https://issues.apache.org/jira/browse/HBASE-10326
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 0.98.0
>            Reporter: ramkrishna.s.vasudevan
>            Assignee: ramkrishna.s.vasudevan
>            Priority: Critical
>              Labels: security
>             Fix For: 0.98.0, 0.99.0
>
>         Attachments: HBASE-10326.patch, HBASE-10326_1.patch
>
>
> This issue is in lieu with HBASE-10322.  In case of export tool, when the cells with visibility labels are exported using a super user we should be able to export the data.  But with the current implementation, the super user would also be able to view cells that has visibility labels associated with the superuser.  The idea of HBASE-10322 is to strip out tags based on user and if so this change is necessary for export tool to work with Visibility.  ACL already has a concept of global admins.  


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)