(hbase-site.xml is attached)
I reinstalled HBase on my development machine and the console shows that
it's just ignoring the cell visibility settings even though it shows
they're active:
hbase(main):001:0> list
TABLE
0 row(s) in 0.1630 seconds
=> []
hbase(main):002:0> get_auths "michaelthomsen"
0 row(s) in 10.1940 seconds
hbase(main):003:0> add_labels ["U", "PII", "PHI"]
0 row(s) in 0.1900 seconds
hbase(main):004:0> set_auths "michaelthomsen", ["U", "PII", "PHI"]
0 row(s) in 0.0500 seconds
hbase(main):005:0> get_auths "michaelthomsen"
U
PII
PHI
0 row(s) in 0.0470 seconds
hbase(main):006:0> create 'test', {NAME => 'prop' }
0 row(s) in 1.2780 seconds
=> Hbase::Table - test
hbase(main):007:0> put "test", "user1", "prop:name", "John Smith"
0 row(s) in 0.0500 seconds
hbase(main):008:0> scan "test"
ROW
COLUMN+CELL
user1 column=prop:name,
timestamp=1519476818510, value=John
Smith
1 row(s) in 0.0260 seconds
hbase(main):009:0> set_visibility "test", "PII", { COLUMNS => "prop" }
1 row(s) in 0.0130 seconds
hbase(main):010:0> scan "test", { AUTHORIZATIONS => ["PHI", "U"] }
ROW
COLUMN+CELL
user1 column=prop:name,
timestamp=1519476818510, value=John
Smith
1 row(s) in 0.0180 seconds
hbase(main):011:0> list_security_capabilities
SIMPLE_AUTHENTICATION
CELL_VISIBILITY
=> ["SIMPLE_AUTHENTICATION", "CELL_VISIBILITY"]
hbase(main):012:0> scan "test", { AUTHORIZATIONS => [] }
ROW
COLUMN+CELL
user1 column=prop:name,
timestamp=1519476818510, value=John
Smith
1 row(s) in 0.0060 seconds
I'm running this on a Mac w/out HDFS. It's HBase 1.3.1. This makes no sense
because it's allowing me to assign authorizations to my simple auth user,
set_visibility runs successfully and it's reporting that cell visibility is
enabled.
<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
<configuration>
<property>
<name>hbase.zookeeper.quorum</name>
<value>localhost</value>
</property>
<property>
<name>hbase.cluster.distributed</name>
<value>true</value>
</property>
<property>
<name>hbase.rootdir</name>
<value>file:////data/hbase</value>
</property>
<property>
<name>hbase.master.info.bindAddress</name>
<value>localhost</value>
</property>
<property>
<name>hbase.regionserver.info.bindAddress</name>
<value>localhost</value>
</property>
<property>
<name>hbase.coprocessor.region.classes</name>
<value>org.apache.hadoop.hbase.security.visibility.VisibilityController</value>
</property>
<property>
<name>hbase.coprocessor.master.classes</name>
<value>org.apache.hadoop.hbase.security.visibility.VisibilityController</value>
</property>
</configuration>
