Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-6222 Add per-KeyValue Security
  3. HBASE-7661

[Per-KV security] Store and apply per cell ACLs in a shadow CF

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Resolved
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Coprocessors, security
    • Labels:
      None

      Description

      Coprocessor based implementation of per-KV security that extends the existing AccessController and ACL model to cover per cell permissions. More comments on this approach can be found on the parent issue. Stores and consults the additional metadata in a shadow column family managed by the AccessController. Preserves existing user facing semantics. Does not require any changes to core code except, optionally, the security shell commands, for testing and prototyping convenience.

        Attachments

        1. 7661-0.94.patch
          124 kB
          Andrew Kyle Purtell
        2. 7661.patch
          136 kB
          Andrew Kyle Purtell

          Activity

            People

            • Assignee:
              apurtell Andrew Kyle Purtell
              Reporter:
              apurtell Andrew Kyle Purtell
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: