[
https://issues.apache.org/jira/browse/NIFI-4637?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16393017#comment-16393017
]
ASF GitHub Bot commented on NIFI-4637:
--------------------------------------
Github user MikeThomsen commented on a diff in the pull request:
https://github.com/apache/nifi/pull/2518#discussion_r173482943
--- Diff:
nifi-nar-bundles/nifi-standard-services/nifi-hbase-client-service-api/src/main/java/org/apache/nifi/hbase/HBaseClientService.java
---
@@ -150,6 +194,40 @@
*/
void scan(String tableName, byte[] startRow, byte[] endRow,
Collection<Column> columns, ResultHandler handler) throws IOException;
+ /**
+ * Scans the given table for the given rowId and passes the result to
the handler.
+ *
+ * @param tableName the name of an HBase table to scan
+ * @param startRow the row identifier to start scanning at
+ * @param endRow the row identifier to end scanning at
+ * @param columns optional columns to return, if not specified all
columns are returned
+ * @param visibilityLabels optional list of visibility labels that the
user should be able to see when communicating with HBase
+ * @param handler a handler to process rows of the result
+ * @throws IOException thrown when there are communication errors with
HBase
+ */
+ void scan(String tableName, byte[] startRow, byte[] endRow,
Collection<Column> columns, List<String> visibilityLabels, ResultHandler
handler) throws IOException;
+
+ /**
+ * Get all of the labels in HBase.
+ *
+ * @return a List of all of the labels.
+ */
+ List<String> getLabels();
+
+ /**
+ * Get all of the labels a given user can see.
+ * @param user the user to lookup.
+ * @return a List of all of the labels a user is allowed to see.
+ */
+ List<String> getLabelsForUser(String user);
+
+ /**
+ * Get all of the labels the current user (NiFi process user or
Kerberos keytab principle) can see.
+ *
+ * @return a List of all of the labels the current can see.
--- End diff --
I have to give this some more thought, but HBase visibility labels work
with or without a Kerberos configuration. So without it, the HBase client does
simple auth and sends over the user running NiFi as the user.
> Add support for HBase visibility labels to HBase processors and controller
> services
> -----------------------------------------------------------------------------------
>
> Key: NIFI-4637
> URL: https://issues.apache.org/jira/browse/NIFI-4637
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Mike Thomsen
> Assignee: Mike Thomsen
> Priority: Major
>
> HBase supports visibility labels, but you can't use them from NiFi because
> there is no way to set them. The existing processors and services should be
> upgraded to handle this capability.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
