[PHOENIX-5785] Remove TTL check in QueryCompiler when doing an SCN / Lookback query

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.16.0
• Assignee: Geoffrey Jacoby
• Reporter: Geoffrey Jacoby
• Created: 19/Mar/20 20:55
• Updated: 23/Mar/20 21:17
• Resolved: 23/Mar/20 21:17

Description

As a sanity check, the Phoenix client verifies that SCN for a query is not before the TTL of any table involved in the query. This causes problems if access control is enabled and the current user doesn't have ADMIN or CREATE privileges, because HBase requires schema-altering privileges to read the full schema in getTableDescriptor.

According to the HBase community, this is because sensitive config parameters can be stored in table descriptor properties, such as those used in HBase encryption. See HBASE-24018, HBASE-8692, and HBASE-9182 for previous discussion, and PHOENIX-5750 for a previous instance where this has affected Phoenix.

Issue Links

• links to: GitHub Pull Request #738