[HBASE-7524] hbase-policy.xml is improperly set thus all rules in it can be by-passed

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.94.1
• Fix Version/s: 0.94.5, 0.95.0
• Component/s: security
• Labels: hbase policy
• Hadoop Flags: Reviewed
• Tags: security
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 09/Jan/13 08:43
• Updated: 26/Feb/13 08:27
• Resolved: 09/Jan/13 23:15

Description

This should be a code error.
In HBasePolicyProvider.java, hbase-policy.xml file was set as,
conf.set("hadoop.policy.file", "hbase-policy.xml");
But in Hadoop ServiceAuthorizationManager.java, policy file was get as,
String policyFile =
System.getProperty("hadoop.policy.file", HADOOP_POLICY_FILE);

The result is, the mentioned hbase-policy.xml file won't be used, and
default hadoop-policy.xml file can be used, which is unexpected.