[jira] [Created] (HBASE-11065) hbase 0.94

2014-04-24 Thread doug chang (JIRA)
doug chang created HBASE-11065: -- Summary: hbase 0.94 Key: HBASE-11065 URL: https://issues.apache.org/jira/browse/HBASE-11065 Project: HBase Issue Type: Bug Components: documentation

[jira] [Created] (HBASE-11066) HBase client could not add resource from hbase-site.xml

2014-04-24 Thread ZhangYong (JIRA)
ZhangYong created HBASE-11066: - Summary: HBase client could not add resource from hbase-site.xml Key: HBASE-11066 URL: https://issues.apache.org/jira/browse/HBASE-11066 Project: HBase Issue

[jira] [Reopened] (HBASE-11065) hbase 0.94

2014-04-24 Thread Lars Hofhansl (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-11065?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lars Hofhansl reopened HBASE-11065: --- hbase 0.94 -- Key: HBASE-11065 URL:

Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Vandana Ayyalasomayajula
Hi All, We have seen a behavior change in the manner AccessController blocks unauthorized users between 0.94 and 0.98. In 0.98, if an unauthorized user tried to perform GET, SCAN empty results are returned, whereas the same operations in 0.94 used to throw access denied exceptions. Is this

[jira] [Created] (HBASE-11067) HBase cannot build againt Hadoop branch-2

2014-04-24 Thread Fengdong Yu (JIRA)
Fengdong Yu created HBASE-11067: --- Summary: HBase cannot build againt Hadoop branch-2 Key: HBASE-11067 URL: https://issues.apache.org/jira/browse/HBASE-11067 Project: HBase Issue Type: Bug

[jira] [Created] (HBASE-11068) Update code to use Admin factory method instead of constructor

2014-04-24 Thread Carter (JIRA)
Carter created HBASE-11068: -- Summary: Update code to use Admin factory method instead of constructor Key: HBASE-11068 URL: https://issues.apache.org/jira/browse/HBASE-11068 Project: HBase Issue

Re: Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Andrew Purtell
This is an intended change that was done as part of introducing cell ACLs. Otherwise we can't support use cases where the user has no authorization on the table or CF level but cell ACLs grant exceptional access. It also brings the AccessController behavior in line with the new

Re: Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Todd Lipcon
Does this leave us open to leaking row existence due to timing differences? For example, imagine you had a table where I happened to know (eg from reading your design docs on the wiki) that the key is made up of social security numbers. If I wanted to come up with a list of valid SSNs, I could

[jira] [Resolved] (HBASE-11066) HBase client could not add resource from hbase-site.xml

2014-04-24 Thread Andrew Purtell (JIRA)
[ https://issues.apache.org/jira/browse/HBASE-11066?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andrew Purtell resolved HBASE-11066. Resolution: Invalid HBaseConfiguration loads hbase-site.xml from the expected location

[jira] [Created] (HBASE-11069) Decouple region merging from ZooKeeper

2014-04-24 Thread Sergey Soldatov (JIRA)
Sergey Soldatov created HBASE-11069: --- Summary: Decouple region merging from ZooKeeper Key: HBASE-11069 URL: https://issues.apache.org/jira/browse/HBASE-11069 Project: HBase Issue Type:

Re: Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Andrew Purtell
Does this leave us open to leaking row existence due to timing differences? ​I think I have to answer yes because we've never considered a defense against this kind of attack against HBase data sources ever. As you say it would depend on schema design. Do you think defending against timing

Re: Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Todd Lipcon
On Thu, Apr 24, 2014 at 10:13 AM, Andrew Purtell apurt...@apache.orgwrote: Does this leave us open to leaking row existence due to timing differences? I think I have to answer yes because we've never considered a defense against this kind of attack against HBase data sources ever. As you

Re: Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Andrew Purtell
Thanks. The perspective is valuable. Unfortunately we had to commit these changes to get them reviewed. But we've flagged HFileV3 as experimental through the 0.98 cycle in public comments about 0.98 (blog posts, presentations), and these features all depend on HFileV3, so I think allows us some

[jira] [Created] (HBASE-11070) [AccessController] Restore early-out access denial if the user has no access at the table or CF level

2014-04-24 Thread Andrew Purtell (JIRA)
Andrew Purtell created HBASE-11070: -- Summary: [AccessController] Restore early-out access denial if the user has no access at the table or CF level Key: HBASE-11070 URL:

Re: Behavior change in Access Controller between 0.94 and 0.98

2014-04-24 Thread Andrew Purtell
https://issues.apache.org/jira/browse/HBASE-11070 On Thu, Apr 24, 2014 at 11:12 AM, Vandana Ayyalasomayajula avand...@yahoo-inc.com wrote: From the users end, I think its better to let them know that they don't have proper authorizations ( when they actually don't have ), rather than

[jira] [Created] (HBASE-11071) Abstract HM admin table handlers from ZK

2014-04-24 Thread Mikhail Antonov (JIRA)
Mikhail Antonov created HBASE-11071: --- Summary: Abstract HM admin table handlers from ZK Key: HBASE-11071 URL: https://issues.apache.org/jira/browse/HBASE-11071 Project: HBase Issue Type:

[jira] [Created] (HBASE-11072) Abstract WAL splitting from ZK

2014-04-24 Thread Mikhail Antonov (JIRA)
Mikhail Antonov created HBASE-11072: --- Summary: Abstract WAL splitting from ZK Key: HBASE-11072 URL: https://issues.apache.org/jira/browse/HBASE-11072 Project: HBase Issue Type: Sub-task

[jira] [Created] (HBASE-11073) Hide ZooKeeperWatcher and dependent ZK Listeners inside of a consensus impl

2014-04-24 Thread Mikhail Antonov (JIRA)
Mikhail Antonov created HBASE-11073: --- Summary: Hide ZooKeeperWatcher and dependent ZK Listeners inside of a consensus impl Key: HBASE-11073 URL: https://issues.apache.org/jira/browse/HBASE-11073

Re: [VOTE] The 1st hbase 0.94.19 release candidate is available for download

2014-04-24 Thread Jean-Marc Spaggiari
BTW, the integration test finished with 2 errors. Logs are below. Not really sure if they are relevent errors or not. It was running on the 8 nodes cluster. I will re-run that over night on the 4 nodes cluster and see. 14/04/24 14:23:36 INFO mapred.JobClient: Job complete: job_local_0003 14/04/24

[jira] [Created] (HBASE-11074) Have PE emit histogram stats as it runs rather than dump once at end of test

2014-04-24 Thread stack (JIRA)
stack created HBASE-11074: - Summary: Have PE emit histogram stats as it runs rather than dump once at end of test Key: HBASE-11074 URL: https://issues.apache.org/jira/browse/HBASE-11074 Project: HBase