Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Fri, 20 Jun 2014 01:16:26 +0000 (UTC)
From: "Jieshan Bean (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12721147.1402678522563.14232.1403226986595@arcas>
In-Reply-To: <JIRA.12721147.1402678522563@arcas>
References: <JIRA.12721147.1402678522563@arcas>
Subject: [jira] [Commented] (HBASE-11344) Hide row keys and such from the
 web UIs
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HBASE-11344?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14038214#comment-14038214 ] 

Jieshan Bean commented on HBASE-11344:
--------------------------------------

+1 on this idea. We are suffering the same security problem.

> Hide row keys and such from the web UIs
> ---------------------------------------
>
>                 Key: HBASE-11344
>                 URL: https://issues.apache.org/jira/browse/HBASE-11344
>             Project: HBase
>          Issue Type: Improvement
>            Reporter: Devaraj Das
>             Fix For: 0.99.0
>
>
> The table details on the master UI lists the start row keys of the regions. The row keys might have sensitive data. We should hide them based on whether or not the user accessing has the required authorization to view the table.. To start with, we could make the display of row keys and such based on a configuration being true or false. If it is false, such potentially sensitive data is never displayed on the web UI.


--
This message was sent by Atlassian JIRA
(v6.2#6252)