Return-Path: X-Original-To: apmail-hbase-user-archive@www.apache.org Delivered-To: apmail-hbase-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1BDCD17892 for ; Fri, 8 May 2015 18:39:23 +0000 (UTC) Received: (qmail 32688 invoked by uid 500); 8 May 2015 18:39:21 -0000 Delivered-To: apmail-hbase-user-archive@hbase.apache.org Received: (qmail 32611 invoked by uid 500); 8 May 2015 18:39:21 -0000 Mailing-List: contact user-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@hbase.apache.org Delivered-To: mailing list user@hbase.apache.org Received: (qmail 32599 invoked by uid 99); 8 May 2015 18:39:21 -0000 Received: from Unknown (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 May 2015 18:39:21 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id A496E1A250B for ; Fri, 8 May 2015 18:39:20 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 2.429 X-Spam-Level: ** X-Spam-Status: No, score=2.429 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, HTML_MESSAGE=3, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id C1A5ExsW7-Jy for ; Fri, 8 May 2015 18:39:19 +0000 (UTC) Received: from mail-pa0-f54.google.com (mail-pa0-f54.google.com [209.85.220.54]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTPS id CB40724C66 for ; Fri, 8 May 2015 18:39:19 +0000 (UTC) Received: by pacwv17 with SMTP id wv17so56514861pac.0 for ; Fri, 08 May 2015 11:39:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=N5eTCGEm2FdpHWbvhbbRPTONqIZcCC/i4cLhv9qDGgg=; b=MH8I6pw/AK9KbRTEHgYRKBiOSbmq491N4P/ieg9WW2zfF7sfZARB4PstrMcEEVfpZV 1f6VRLTy6sWIypMvz/jVyjiVxAfpBTryKoHwkyMp2mdfXZoNdcQIk5BTTjewM7zZRsmX 4nKZFQiApVbzhWfZwnGIbsvZCBsVdMLtLdQuorF5H2dIrwi5hg8nSqH5Ou6fLT6s4Bx+ Xd/ZE6IUefALIlF1VGAQ7d+dhBnKweJmebrqI1bkRsMnyR9Qkq2JowG4eW18ZVkkYvoO 6pQabau62VH5fX12AA3kkeHz82QmvrCYJXimoiNY2DuWaow9qGYRO76go1cbayq0bK6l pq5g== MIME-Version: 1.0 X-Received: by 10.68.219.42 with SMTP id pl10mr684395pbc.154.1431110352907; Fri, 08 May 2015 11:39:12 -0700 (PDT) Received: by 10.70.33.42 with HTTP; Fri, 8 May 2015 11:39:12 -0700 (PDT) In-Reply-To: References: Date: Fri, 8 May 2015 11:39:12 -0700 Message-ID: Subject: Re: MapReduce on Sanpshots From: rahul malviya To: user@hbase.apache.org Content-Type: multipart/alternative; boundary=047d7b10caa3383367051596586d --047d7b10caa3383367051596586d Content-Type: text/plain; charset=UTF-8 Currently we have only one user accessing all the big data stack - hdfs/hbase etc ... so security is not a issue for us but thanks for stressing on this and I will keep this in mind when we move to secured cluster. Apart from security there are no other concerns ? Thanks, Rahul On Fri, May 8, 2015 at 11:23 AM, Michael Segel wrote: > > > On May 8, 2015, at 11:04 AM, Ted Yu wrote: > > > > HBASE-8369 > > > " > WARNING: This feature bypasses HBase-level security completely since the > files are read from the hdfs directly. The user who is running the scan / > job has to have read permissions to the data files and snapshot files. > " > > I think that says it all. > Do you really want to open up your HBase snapshots to anyone? > > > The opinions expressed here are mine, while they may reflect a cognitive > thought, that is purely accidental. > Use at your own risk. > Michael Segel > michael_segel (AT) hotmail.com > > > > > > --047d7b10caa3383367051596586d--