[RANGER-558] Hbase plugin: unless user has READ access at some level under the table/family being accessed (via scan/get) authorizer should throw an exception and audit

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.5.0
• Fix Version/s: 0.5.1
• Assignee: Alok Lal
• Reporter: Alok Lal
• Created: 17/Jun/15 06:56
• Updated: 06/Jul/15 08:24
• Resolved: 18/Jun/15 18:41

Description

Authorizer returns 0 rows today if user has some other type of access (say WRITE) to a column under the table being requested. Further, such attempts are not audited as a denial. This behavior is at odds with that of the hbase standard authorizer. Both of these should be fixed.