Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Critical
-
Resolution: Fixed
-
Affects Version/s: 0.98.0
-
Component/s: security
-
Labels:
-
Hadoop Flags:Reviewed
-
Release Note:HBase super user can (any user who is having system visibility label) read back all the cells irrespective of visibility expression applied for cells.
-
Tags:visibility
Description
This issue is in lieu with HBASE-10322. In case of export tool, when the cells with visibility labels are exported using a super user we should be able to export the data. But with the current implementation, the super user would also be able to view cells that has visibility labels associated with the superuser. The idea of HBASE-10322 is to strip out tags based on user and if so this change is necessary for export tool to work with Visibility. ACL already has a concept of global admins.
Issue Links
- is related to
-
HBASE-10322
Strip tags from KV while sending back to client on reads
-
- Closed
-
Activity
| Status | Resolved [ 5 ] | Closed [ 6 ] |
| Release Note | HBase super user can (any user who is having system visibility label) read back all the cells irrespective of visibility expression applied for cells. | |
| Component/s | security [ 12314192 ] |
| Status | Patch Available [ 10002 ] | Resolved [ 5 ] |
| Hadoop Flags | Reviewed [ 10343 ] | |
| Resolution | Fixed [ 1 ] |
| Status | Open [ 1 ] | Patch Available [ 10002 ] |
| Attachment | HBASE-10326_1.patch [ 12622599 ] |
| Status | Patch Available [ 10002 ] | Open [ 1 ] |
| Status | Open [ 1 ] | Patch Available [ 10002 ] |
| Attachment | HBASE-10326.patch [ 12622582 ] |
| Field | Original Value | New Value |
|---|---|---|
| Link |
This issue is related to |