Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.98.0
    • Fix Version/s: 0.98.0
    • Component/s: Coprocessors, security
    • Labels:
      None
    • Hadoop Flags:
      Incompatible change, Reviewed
    • Release Note:
      Hide
      This change extends the HBase ACL model to the cell level. ACLs can now be set on a per cell basis. See the Security section of the HBase manual for configuration and usage detail.

      HBASE-7663 introduced a new parent class for Get and Scan, Query. This change also moves the getFilter and SetFilter methods of Get and Scan to the common parent class. Client code may need to be recompiled.
      Show
      This change extends the HBase ACL model to the cell level. ACLs can now be set on a per cell basis. See the Security section of the HBase manual for configuration and usage detail. HBASE-7663 introduced a new parent class for Get and Scan, Query. This change also moves the getFilter and SetFilter methods of Get and Scan to the common parent class. Client code may need to be recompiled.

      Description

      We can improve the performance of per-cell authorization if the read of the cell ACL, if any, is combined with the sequential read of the cell data already in progress. When tags are inlined with KVs in block encoding (see HBASE-7448, and more generally HBASE-7233), we can use them to carry cell ACLs instead of using out-of-line storage (HBASE-7661) for that purpose.

        Attachments

        1. HBASE-7662_addendum.patch
          1 kB
          Anoop Sam John
        2. 7662-final.patch
          105 kB
          Andrew Purtell
        3. 7662-final.patch
          121 kB
          Andrew Purtell
        4. latency-single.7662.xlsx
          148 kB
          Andrew Purtell
        5. 7662.patch
          110 kB
          Andrew Purtell
        6. 7662.patch
          112 kB
          Andrew Purtell
        7. 7662.patch
          109 kB
          Andrew Purtell
        8. 7662.patch
          114 kB
          Andrew Purtell

          Issue Links

            Activity

              People

              • Assignee:
                apurtell Andrew Purtell
                Reporter:
                apurtell Andrew Purtell
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: