[HBASE-7661] [Per-KV security] Store and apply per cell ACLs in a shadow CF

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Component/s: Coprocessors, security
• Assignee: Unassigned
• Reporter: Andrew Kyle Purtell
• Created: 24/Jan/13 22:18
• Updated: 16/Jun/22 01:20
• Resolved: 17/Oct/13 16:42

Description

Coprocessor based implementation of per-KV security that extends the existing AccessController and ACL model to cover per cell permissions. More comments on this approach can be found on the parent issue. Stores and consults the additional metadata in a shadow column family managed by the AccessController. Preserves existing user facing semantics. Does not require any changes to core code except, optionally, the security shell commands, for testing and prototyping convenience.