[HBASE-10860] Insufficient AccessController covering permission check

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.98.0
• Fix Version/s: 0.99.0, 0.98.2
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Anoop Sam John
• Reporter: Anoop Sam John
• Created: 28/Mar/14 10:45
• Updated: 21/Feb/15 23:29
• Resolved: 29/Mar/14 11:12

Description

  List<Cell> list = (List<Cell>)entry.getValue();
  if (list == null || list.isEmpty()) {
	get.addFamily(col);
  } else {
	for (Cell cell : list) {
	  get.addColumn(col, CellUtil.cloneQualifier(cell));
	}
  }

When a delete family Mutation comes, a Cell will be added into the list with Qualifier as null. (See Delete#deleteFamily(byte[])). So it will miss getting added against the check list == null || list.isEmpty(). We will fail getting the cells under this cf for covering permission check.