[HBASE-22123] REST gateway reports Insufficient permissions exceptions as 404 Not Found

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.5
• Fix Version/s: 3.0.0-alpha-1, 2.2.0, 2.3.0, 2.0.6, 2.1.5
• Component/s: REST
• Hadoop Flags: Reviewed

Release Note

When insufficient permissions, you now get:

HTTP/1.1 403 Forbidden

on the HTTP side, and in the message

Forbidden
org.apache.hadoop.hbase.security.AccessDeniedException: org.apache.hadoop.hbase.security.AccessDeniedException: Insufficient permissions for user ‘myuser',action: get, tableName:mytable, family:cf.
at org.apache.ranger.authorization.hbase.RangerAuthorizationCoprocessor.authorizeAccess(RangerAuthorizationCoprocessor.java:547)
and the rest of the ADE stack

• Assignee: Tomas Sokorai
• Reporter: Tomas Sokorai
• Created: 28/Mar/19 11:26
• Updated: 29/Mar/19 08:23
• Resolved: 28/Mar/19 19:32

Description

When a row access is denied due to insufficient permissions, the error thrown to the client is 404 Not Found, instead of the proper 403 Forbidden exception.