Mailing-List: contact accumulo-user-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: accumulo-user@incubator.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: 
 <35302348.119380.1324045132333.JavaMail.root@linzimmb04o.imo.intelink.gov>
References: 
 <CAC5i+BnrVEngiVGzuMZKbfz6CnaakGuqw0f8mHgJaKtekKofrA@mail.gmail.com>
 <35302348.119380.1324045132333.JavaMail.root@linzimmb04o.imo.intelink.gov>
From: John Stoneham <lyric@lyrically.net>
Date: Fri, 16 Dec 2011 09:23:39 -0500
Message-ID: 
 <CAC5i+BntGgjWCzsKCD3W9p0Q985uvq0pPFA7LP7rcNiT7U5quA@mail.gmail.com>
Subject: Re: Passing scan authorizations that exceed the Accumulo user's
 authorizations
To: accumulo-user@incubator.apache.org
Content-Type: multipart/alternative; boundary=14dae9399835205f4904b4365a2d

--14dae9399835205f4904b4365a2d
Content-Type: text/plain; charset=ISO-8859-1

On Fri, Dec 16, 2011 at 9:18 AM, Billie J Rinaldi <billie.j.rinaldi@ugov.gov
> wrote:

> It sounds like you always want to scan with all the authorizations your
> user has.  In that case, you don't need a list of all possible
> authorizations to pass in -- just pass in the user's actual authorizations,
> which can be retrieved with
> connector.securityOperations().getUserAuthorizations(user).
>

Currently, I want to scan using the intersection of my (human) user's
authorizations and the Accumulo (application) user's authorizations. What
you've listed is the call I'm using to get the Accumulo user's
authorizations. But if my user were to have an authorization that, for some
reason, had been removed from the Accumulo user, or that was available on
one deployment or cluster but not on another, I'd have a problem unless I
performed this intersection in the application.

-- 
John Stoneham
lyric@lyrically.net

--14dae9399835205f4904b4365a2d
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div class=3D"gmail_quote">On Fri, Dec 16, 2011 at 9:18 AM, Billie J Rinald=
i <span dir=3D"ltr">&lt;<a href=3D"mailto:billie.j.rinaldi@ugov.gov">billie=
.j.rinaldi@ugov.gov</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quo=
te" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"=
>

<div class=3D"im">It sounds like you always want to scan with all the autho=
rizations your user has. =A0In that case, you don&#39;t need a list of all =
possible authorizations to pass in -- just pass in the user&#39;s actual au=
thorizations, which can be retrieved with</div>


connector.securityOperations().getUserAuthorizations(user).<span class=3D"H=
OEnZb"><font color=3D"#888888"><br></font></span></blockquote><div><br></di=
v><div>Currently, I want to scan using the intersection of my (human) user&=
#39;s authorizations and the Accumulo (application) user&#39;s authorizatio=
ns. What you&#39;ve listed is the call I&#39;m using to get the Accumulo us=
er&#39;s authorizations. But if my user were to have an authorization that,=
 for some reason, had been removed from the Accumulo user, or that was avai=
lable on one deployment or cluster but not on another, I&#39;d have a probl=
em unless I performed this intersection in the application.</div>

</div><div><br></div>-- <br>John Stoneham<br><a href=3D"mailto:lyric@lyrica=
lly.net">lyric@lyrically.net</a><br>

--14dae9399835205f4904b4365a2d--