[HBASE-13239] HBase grant at specific column level does not work for Groups

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.98.4
• Fix Version/s: 1.0.1, 1.1.0, 0.98.12, 2.0.0
• Hadoop Flags: Reviewed
• Assignee: Ted Yu
• Reporter: Jaymin Patel
• Created: 13/Mar/15 23:52
• Updated: 18/Jun/18 15:08
• Resolved: 15/Mar/15 03:25

Description

While performing Grant command to a specific column in a table - to a specific group does not produce needed results. However, when specific user is mentioned (instead of group name) in grant command, it becomes effective

Steps to Reproduce :
1) using super-user, Grant a table/column family/column level grant to a group
2) login using a user ( part of the above group) and scan the table. It does not return any results

3) using super-user, Grant a table/column family/column level grant to a specific user ( instead of group)
4) login using that specific user and scan the table. It produces correct results, i.e. provides only the column where user has select privileges

Issue Links

• is depended upon by: HBASE-13241 Add tests for group level grants
• is related to: HBASE-14191 HBase grant at specific column family level does not work for Groups