Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-10860

Insufficient AccessController covering permission check

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.98.0
    • 0.99.0, 0.98.2
    • security
    • None
    • Reviewed

    Description

        List<Cell> list = (List<Cell>)entry.getValue();
        if (list == null || list.isEmpty()) {
      	get.addFamily(col);
        } else {
      	for (Cell cell : list) {
      	  get.addColumn(col, CellUtil.cloneQualifier(cell));
      	}
        }
      

      When a delete family Mutation comes, a Cell will be added into the list with Qualifier as null. (See Delete#deleteFamily(byte[])). So it will miss getting added against the check list == null || list.isEmpty(). We will fail getting the cells under this cf for covering permission check.

      Attachments

        1. HBASE-10860.patch
          2 kB
          Anoop Sam John

        Activity

          People

            anoop.hbase Anoop Sam John
            anoop.hbase Anoop Sam John
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: