Andrew Wong has posted comments on this change. ( http://gerrit.cloudera.org:8080/11753 )
Change subject: authz: verify tokens on scans ...................................................................... Patch Set 9: (1 comment) http://gerrit.cloudera.org:8080/#/c/11753/9/src/kudu/tserver/tablet_service.cc File src/kudu/tserver/tablet_service.cc: http://gerrit.cloudera.org:8080/#/c/11753/9/src/kudu/tserver/tablet_service.cc@436 PS9, Line 436: respond_not_authorized(scan_pb.projected_columns(i).name()); > Won't diff scans with IS_DELETED get rejected here? It's probably be easy enough to ignore "is_deleted" here if we get kColumnNotFound, but it's a bit hacky. That said, I don't think we can, nor should we generalize this approach to all virtual columns. -- To view, visit http://gerrit.cloudera.org:8080/11753 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I7a5d81cf215a5d936f8853feba05778038764905 Gerrit-Change-Number: 11753 Gerrit-PatchSet: 9 Gerrit-Owner: Andrew Wong <[email protected]> Gerrit-Reviewer: Adar Dembo <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: Hao Hao <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Tidy Bot (241) Gerrit-Comment-Date: Wed, 20 Mar 2019 06:21:33 +0000 Gerrit-HasComments: Yes
