[HBASE-11251] LoadTestTool should grant READ permission for the users that are given READ access for specific cells

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.98.2
• Fix Version/s: 0.99.0, 0.98.3
• Hadoop Flags: Reviewed
• Assignee: ramkrishna.s.vasudevan
• Reporter: ramkrishna.s.vasudevan
• Created: 26/May/14 04:38
• Updated: 21/Feb/15 23:30
• Resolved: 26/May/14 06:18

Description

In 0.98.2 onwards the AccessControlFilter

case CHECK_CELL_FIRST: {
        LOG.info("Am coming here for cell first strategy");
        if (authManager.authorize(user, table, cell, Permission.Action.READ) &&
            authManager.authorize(user, table, family, qualifier, Permission.Action.READ)) {
          LOG.info("Returning include");
          return ReturnCode.INCLUDE;
        }

expects a READ permission on the table for those Users that are granted READ permission on the cell level.
In 0.98.1

if (authManager.authorize(user, table, cell, cellFirstStrategy, Permission.Action.READ)) {
      return ReturnCode.INCLUDE;
    }

So from 0.98.2 onwards IntegrationTestIngestWithACL was failing. Hence this JIRA is targeted to correct the behaviour and make the IT work again.