Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-6222 Add per-KeyValue Security
  3. HBASE-7662

[Per-KV security] Per cell ACLs stored in tags

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.98.0
    • 0.98.0
    • Coprocessors, security
    • None
    • Incompatible change, Reviewed
    • Hide
      This change extends the HBase ACL model to the cell level. ACLs can now be set on a per cell basis. See the Security section of the HBase manual for configuration and usage detail.

      HBASE-7663 introduced a new parent class for Get and Scan, Query. This change also moves the getFilter and SetFilter methods of Get and Scan to the common parent class. Client code may need to be recompiled.
      Show
      This change extends the HBase ACL model to the cell level. ACLs can now be set on a per cell basis. See the Security section of the HBase manual for configuration and usage detail. HBASE-7663 introduced a new parent class for Get and Scan, Query. This change also moves the getFilter and SetFilter methods of Get and Scan to the common parent class. Client code may need to be recompiled.

    Description

      We can improve the performance of per-cell authorization if the read of the cell ACL, if any, is combined with the sequential read of the cell data already in progress. When tags are inlined with KVs in block encoding (see HBASE-7448, and more generally HBASE-7233), we can use them to carry cell ACLs instead of using out-of-line storage (HBASE-7661) for that purpose.

      Attachments

        1. latency-single.7662.xlsx
          148 kB
          Andrew Kyle Purtell
        2. HBASE-7662_addendum.patch
          1 kB
          Anoop Sam John
        3. 7662-final.patch
          121 kB
          Andrew Kyle Purtell
        4. 7662-final.patch
          105 kB
          Andrew Kyle Purtell
        5. 7662.patch
          114 kB
          Andrew Kyle Purtell
        6. 7662.patch
          109 kB
          Andrew Kyle Purtell
        7. 7662.patch
          112 kB
          Andrew Kyle Purtell
        8. 7662.patch
          110 kB
          Andrew Kyle Purtell

        Issue Links

          Activity

            People

              apurtell Andrew Kyle Purtell
              apurtell Andrew Kyle Purtell
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: