[KYLIN-3223] Query for the list of hybrid cubes results in NPE

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: v2.2.0
• Fix Version/s: v2.3.0
• Component/s: REST Service
• Environment: HDP 2.5.6, Kylin 2.2
• Assignee: Vsevolod Ostapenko
• Reporter: Vsevolod Ostapenko
• Created: 01/Feb/18 16:32
• Updated: 02/Apr/18 13:42
• Resolved: 10/Feb/18 14:25

Description

Calling REST API to get the list of hybrid cubes returns stack trace with NPE exception.

curl -u ADMIN:KYLIN -X GET -H 'Content-Type: application/json'  -d {}  http://localhost:7070/kylin/api/hybrids
 

 

If a parameter project without a value is specified, call succeeds. E.g.

curl -u ADMIN:KYLIN -X GET -H 'Content-Type: application/json'  -d {} http://localhost:7070/kylin/api/hybrids?project

Quick look at the HybridService.java suggests that there is a bug in the code, where the very first line tries to check ACLs on the project using the project name, which is NULL, when project parameter is not specified as part of the URL.
If parameter is specified without a value, ACL check is not performed, so it's another bug, as the list of projects is retrieved without read permission checking.