[HBASE-10970] [AccessController] Issues with covering cell permission checks

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.98.0
• Fix Version/s: 0.99.0, 0.98.2
• Hadoop Flags: Reviewed
• Assignee: Anoop Sam John
• Reporter: ramkrishna.s.vasudevan
• Created: 14/Apr/14 04:21
• Updated: 21/Feb/15 23:29
• Resolved: 24/Apr/14 05:47

Description

Refer to discussion in HBASE-10823.

The exact version deletion also check for the preceeding version though the latest version allows the permission

This solves the problems
1. Exact version delete checks only the relevant cell version permission (not all versions under this)
2. When Put/Delete contains individual cell TS, this check cell permissions for only relevant covering cell(s) under that specified TS (in Mutation KV)

Issue Links

• is related to: HBASE-10823 Resolve LATEST_TIMESTAMP to current server time before scanning for ACLs