hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12470) Way to determine which labels are applied to a cell in a table
Date Fri, 14 Nov 2014 19:05:34 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12470?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14212645#comment-14212645
] 

Andrew Purtell commented on HBASE-12470:
----------------------------------------

bq. Also the client should be determined to know whether it is really a legitmate user. A
malicious client could claim to be a legitmate user and ask for a codec that could send across
the tags.  The server should be able to clearly identify such cases.

That's why you'd negotiate codecs _after_ kerberos authentication.

> Way to determine which labels are applied to a cell in a table
> --------------------------------------------------------------
>
>                 Key: HBASE-12470
>                 URL: https://issues.apache.org/jira/browse/HBASE-12470
>             Project: HBase
>          Issue Type: New Feature
>          Components: security
>    Affects Versions: 0.98.6.1
>            Reporter: Kevin Odell
>
> There is currently no way to determine which labels are applied to a cell without using
the HFile tool to dump each HFile and then translating the output back to the hbase:labels
table.  This is quite tedious on larger tables.  Since this could be a security risk perhaps
we make it tunable with hbase.superuser.can.veiw.cells or something along those lines?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message