Hi Anoop,
Looks like it's running as michaelthomsen:
hbase(main):013:0> whoami
michaelthomsen (auth:SIMPLE)
groups: staff, everyone, localaccounts, _appserverusr, admin,
_appserveradm, _lpadmin, com.apple.sharepoint.group.2, _appstore,
_lpoperator, _developer, com.apple.access_ftp,
com.apple.access_screensharing, com.apple.access_ssh,
com.apple.sharepoint.group.1
On Sat, Feb 24, 2018 at 9:31 AM, Anoop John <anoop.hb...@gmail.com> wrote:
> As which user you are running the scan shell command? It has to be as
> michaelthomasen as u have set auths to this uname. Looks like the user
> running the command is the hbase super user who started the RS process.
> Then all cells will be returned irrespective of its visibility and scan
> auths.
>
> Anoop
>
> On Saturday, February 24, 2018, Mike Thomsen <mikerthom...@gmail.com>
> wrote:
>
> > (hbase-site.xml is attached)
> >
> > I reinstalled HBase on my development machine and the console shows that
> > it's just ignoring the cell visibility settings even though it shows
> > they're active:
> >
> > hbase(main):001:0> list
> > TABLE
> >
> >
> >
> > 0 row(s) in 0.1630 seconds
> >
> > => []
> > hbase(main):002:0> get_auths "michaelthomsen"
> > 0 row(s) in 10.1940 seconds
> >
> > hbase(main):003:0> add_labels ["U", "PII", "PHI"]
> > 0 row(s) in 0.1900 seconds
> >
> > hbase(main):004:0> set_auths "michaelthomsen", ["U", "PII", "PHI"]
> > 0 row(s) in 0.0500 seconds
> >
> > hbase(main):005:0> get_auths "michaelthomsen"
> > U
> >
> >
> >
> > PII
> >
> >
> >
> > PHI
> >
> >
> >
> > 0 row(s) in 0.0470 seconds
> >
> > hbase(main):006:0> create 'test', {NAME => 'prop' }
> > 0 row(s) in 1.2780 seconds
> >
> > => Hbase::Table - test
> > hbase(main):007:0> put "test", "user1", "prop:name", "John Smith"
> > 0 row(s) in 0.0500 seconds
> >
> > hbase(main):008:0> scan "test"
> > ROW
> > COLUMN+CELL
> >
> >
> > user1 column=prop:name,
> > timestamp=1519476818510, value=John Smith
> >
> > 1 row(s) in 0.0260 seconds
> >
> > hbase(main):009:0> set_visibility "test", "PII", { COLUMNS => "prop" }
> > 1 row(s) in 0.0130 seconds
> >
> > hbase(main):010:0> scan "test", { AUTHORIZATIONS => ["PHI", "U"] }
> > ROW
> > COLUMN+CELL
> >
> >
> > user1 column=prop:name,
> > timestamp=1519476818510, value=John Smith
> >
> > 1 row(s) in 0.0180 seconds
> >
> > hbase(main):011:0> list_security_capabilities
> > SIMPLE_AUTHENTICATION
> > CELL_VISIBILITY
> >
> > => ["SIMPLE_AUTHENTICATION", "CELL_VISIBILITY"]
> > hbase(main):012:0> scan "test", { AUTHORIZATIONS => [] }
> > ROW
> > COLUMN+CELL
> >
> >
> > user1 column=prop:name,
> > timestamp=1519476818510, value=John Smith
> >
> > 1 row(s) in 0.0060 seconds
> >
> >
> > I'm running this on a Mac w/out HDFS. It's HBase 1.3.1. This makes no
> > sense because it's allowing me to assign authorizations to my simple auth
> > user, set_visibility runs successfully and it's reporting that cell
> > visibility is enabled.
> >
> >
>
