Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-6222 Add per-KeyValue Security
  3. HBASE-7662

[Per-KV security] Per cell ACLs stored in tags

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.98.0
    • 0.98.0
    • Coprocessors, security
    • None
    • Incompatible change, Reviewed
    • Hide
      This change extends the HBase ACL model to the cell level. ACLs can now be set on a per cell basis. See the Security section of the HBase manual for configuration and usage detail.

      HBASE-7663 introduced a new parent class for Get and Scan, Query. This change also moves the getFilter and SetFilter methods of Get and Scan to the common parent class. Client code may need to be recompiled.
      Show
      This change extends the HBase ACL model to the cell level. ACLs can now be set on a per cell basis. See the Security section of the HBase manual for configuration and usage detail. HBASE-7663 introduced a new parent class for Get and Scan, Query. This change also moves the getFilter and SetFilter methods of Get and Scan to the common parent class. Client code may need to be recompiled.

    Description

      We can improve the performance of per-cell authorization if the read of the cell ACL, if any, is combined with the sequential read of the cell data already in progress. When tags are inlined with KVs in block encoding (see HBASE-7448, and more generally HBASE-7233), we can use them to carry cell ACLs instead of using out-of-line storage (HBASE-7661) for that purpose.

      Attachments

        1. 7662.patch
          114 kB
          Andrew Kyle Purtell
        2. 7662.patch
          109 kB
          Andrew Kyle Purtell
        3. 7662.patch
          112 kB
          Andrew Kyle Purtell
        4. 7662.patch
          110 kB
          Andrew Kyle Purtell
        5. latency-single.7662.xlsx
          148 kB
          Andrew Kyle Purtell
        6. 7662-final.patch
          121 kB
          Andrew Kyle Purtell
        7. 7662-final.patch
          105 kB
          Andrew Kyle Purtell
        8. HBASE-7662_addendum.patch
          1 kB
          Anoop Sam John

        Issue Links

          depends upon

          Bug - A problem which impairs or prevents the functions of the product. HBASE-9962 Improve tag iteration

          • Major - Major loss of function.
          • Closed
          relates to

          Sub-task - The sub-task of the issue HBASE-9997 Add per KV security details to HBase book

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed

          Sub-task - The sub-task of the issue HBASE-9846 Integration test and LoadTestTool support for cell ACLs

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. HBASE-9845 Add MR support for cell ACLs

          • Major - Major loss of function.
          • Closed

          Activity

            People

              apurtell Andrew Kyle Purtell
              apurtell Andrew Kyle Purtell
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: