[ 
https://issues.apache.org/jira/browse/HBASE-11117?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13990444#comment-13990444
 ] 

Anoop Sam John commented on HBASE-11117:
----------------------------------------

{code}
-      authResult.setAllowed(checkCoveringPermission(OpType.APPEND, env, 
increment.getRow(),
+      authResult.setAllowed(checkCoveringPermission(OpType.INCREMENT, env, 
increment.getRow(),
{code}
I guess a copy paste mistake with previous commits. Correcting in this patch.

> [AccessController] checkAndPut/Delete hook should check only Read permission
> ----------------------------------------------------------------------------
>
>                 Key: HBASE-11117
>                 URL: https://issues.apache.org/jira/browse/HBASE-11117
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 0.98.0
>            Reporter: Anoop Sam John
>            Assignee: Anoop Sam John
>             Fix For: 0.99.0, 0.98.3
>
>         Attachments: HBASE-11117.patch
>
>
> We check for Read and Write permissions in checkAndPut/Delete hooks. Here we 
> check for the condition part alone and so can check for Read permission 
> alone. Later prePut/Delete hook is getting called with Put/Delete mutation 
> and in that we properly check for the Write permission



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to