[ 
https://issues.apache.org/jira/browse/HBASE-11251?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14008594#comment-14008594
 ] 

Anoop Sam John commented on HBASE-11251:
----------------------------------------

+      HTable table = new HTable(conf, tableName);

The table is just used to get the tabelName which we already have.  We can 
avoid this HTable creation and so the close in finally.  This is there in 2 
places in the patch.
{code}
-        AccessControlClient.grant(conf, tableName, userOwner.getShortName(), 
COLUMN_FAMILY,
+        try {
+          AccessControlClient.grant(conf, table.getName(), 
userOwner.getShortName(), null,
{code}
Any reason why the specific CF grant is changed in this patch?

> LoadTestTool should grant READ permission for the users that are given READ 
> access for specific cells
> -----------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-11251
>                 URL: https://issues.apache.org/jira/browse/HBASE-11251
>             Project: HBase
>          Issue Type: Bug
>    Affects Versions: 0.98.2
>            Reporter: ramkrishna.s.vasudevan
>            Assignee: ramkrishna.s.vasudevan
>             Fix For: 0.99.0, 0.98.3
>
>         Attachments: HBASE-11251_0.98.patch, HBASE-11251_trunk.patch
>
>
> In 0.98.2 onwards the AccessControlFilter
> {code}
> case CHECK_CELL_FIRST: {
>         LOG.info("Am coming here for cell first strategy");
>         if (authManager.authorize(user, table, cell, Permission.Action.READ) 
> &&
>             authManager.authorize(user, table, family, qualifier, 
> Permission.Action.READ)) {
>           LOG.info("Returning include");
>           return ReturnCode.INCLUDE;
>         }
> {code}
> expects a READ permission on the table for those Users that are granted READ 
> permission on the cell level.
> In 0.98.1
> {code}
> if (authManager.authorize(user, table, cell, cellFirstStrategy, 
> Permission.Action.READ)) {
>       return ReturnCode.INCLUDE;
>     }
> {code}
> So from 0.98.2 onwards IntegrationTestIngestWithACL was failing.  Hence this 
> JIRA is targeted to correct the behaviour and make the IT work again.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to