hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ted Yu (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-11251) LoadTestTool should grant READ permission for the users that are given READ access for specific cells
Date Mon, 26 May 2014 17:06:01 GMT

    [ https://issues.apache.org/jira/browse/HBASE-11251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14008961#comment-14008961
] 

Ted Yu commented on HBASE-11251:
--------------------------------

This seems to cause TestTableLockManager#testTableReadLock to fail.
{code}
2014-05-26 08:15:09,392 FATAL [Thread-1] util.LoadTestTool(546): Error in granting permission
for the user user1
org.apache.hadoop.hbase.TableNotFoundException: Table &apos;hbase:acl&apos; was not
found, got: TestTableLevelLocks.
  at org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.locateRegionInMeta(ConnectionManager.java:1068)
  at org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.locateRegion(ConnectionManager.java:995)
  at org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.locateRegion(ConnectionManager.java:952)
  at org.apache.hadoop.hbase.client.ConnectionManager$HConnectionImplementation.getRegionLocation(ConnectionManager.java:793)
  at org.apache.hadoop.hbase.client.HTable.getRegionLocation(HTable.java:507)
  at org.apache.hadoop.hbase.client.HTable.getKeysAndRegionsInRange(HTable.java:709)
  at org.apache.hadoop.hbase.client.HTable.getKeysAndRegionsInRange(HTable.java:681)
  at org.apache.hadoop.hbase.client.HTable.getStartKeysInRange(HTable.java:1674)
  at org.apache.hadoop.hbase.client.HTable.coprocessorService(HTable.java:1630)
  at org.apache.hadoop.hbase.client.HTable.coprocessorService(HTable.java:1611)
  at org.apache.hadoop.hbase.security.access.AccessControlClient.grant(AccessControlClient.java:102)
  at org.apache.hadoop.hbase.util.LoadTestTool.loadTable(LoadTestTool.java:544)
  at org.apache.hadoop.hbase.util.LoadTestTool.doWork(LoadTestTool.java:457)
  at org.apache.hadoop.hbase.util.AbstractHBaseTool.run(AbstractHBaseTool.java:112)
  at org.apache.hadoop.hbase.master.TestTableLockManager.testTableReadLock(TestTableLockManager.java:337)
{code}
When security is not enabled, permission granting shouldn't be done.

> LoadTestTool should grant READ permission for the users that are given READ access for
specific cells
> -----------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-11251
>                 URL: https://issues.apache.org/jira/browse/HBASE-11251
>             Project: HBase
>          Issue Type: Bug
>    Affects Versions: 0.98.2
>            Reporter: ramkrishna.s.vasudevan
>            Assignee: ramkrishna.s.vasudevan
>             Fix For: 0.99.0, 0.98.3
>
>         Attachments: HBASE-11251_0.98.patch, HBASE-11251_0.98_1.patch, HBASE-11251_trunk.patch,
HBASE-11251_trunk_1.patch
>
>
> In 0.98.2 onwards the AccessControlFilter
> {code}
> case CHECK_CELL_FIRST: {
>         LOG.info("Am coming here for cell first strategy");
>         if (authManager.authorize(user, table, cell, Permission.Action.READ) &&
>             authManager.authorize(user, table, family, qualifier, Permission.Action.READ))
{
>           LOG.info("Returning include");
>           return ReturnCode.INCLUDE;
>         }
> {code}
> expects a READ permission on the table for those Users that are granted READ permission
on the cell level.
> In 0.98.1
> {code}
> if (authManager.authorize(user, table, cell, cellFirstStrategy, Permission.Action.READ))
{
>       return ReturnCode.INCLUDE;
>     }
> {code}
> So from 0.98.2 onwards IntegrationTestIngestWithACL was failing.  Hence this JIRA is
targeted to correct the behaviour and make the IT work again.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message