hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ashish Singhi (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-12811) [AccessController] NPE while scanning a table with user not having READ permission on the namespace
Date Fri, 09 Jan 2015 15:29:35 GMT

    [ https://issues.apache.org/jira/browse/HBASE-12811?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14271154#comment-14271154
] 

Ashish Singhi commented on HBASE-12811:
---------------------------------------

Thanks for the review, Ted and Srikanth. 

> [AccessController] NPE while scanning a table with user not having READ permission on
the namespace
> ---------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-12811
>                 URL: https://issues.apache.org/jira/browse/HBASE-12811
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 0.98.9
>            Reporter: Ashish Singhi
>            Assignee: Ashish Singhi
>             Fix For: 1.0.0, 2.0.0, 0.98.10, 1.1.0
>
>         Attachments: HBASE-12811.patch
>
>
> Steps to reproduce
> 1) Grant a group permission(other than READ) on a namespace
> 2) Scan a table in that namespace from a user belonging to that group
> we get the following exception.
> {noformat}
> java.lang.NullPointerException
> 	at org.apache.hadoop.hbase.security.access.TablePermission.implies(TablePermission.java:215)
> 	at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:340)
> 	at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:332)
> 	at org.apache.hadoop.hbase.security.access.TableAuthManager.authorizeGroup(TableAuthManager.java:473)
> 	at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:490)
> 	at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:500)
> 	at org.apache.hadoop.hbase.security.access.AccessController.permissionGranted(AccessController.java:415)
> 	at org.apache.hadoop.hbase.security.access.AccessController.permissionGranted(AccessController.java:484)
> 	at org.apache.hadoop.hbase.security.access.AccessController.internalPreRead(AccessController.java:1504)
> 	at org.apache.hadoop.hbase.security.access.AccessController.preScannerOpen(AccessController.java:2027)
> 	at org.apache.hadoop.hbase.regionserver.RegionCoprocessorHost.preScannerOpen(RegionCoprocessorHost.java:1987)
> 	at org.apache.hadoop.hbase.regionserver.HRegionServer.scan(HRegionServer.java:3102)
> {noformat}
> *Note:* Line numbers may not match.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message