[jira] [Updated] (HBASE-7524) hbase-policy.xml is improperly set thus all rules in it can be by-passed

["Kai Zheng (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HBASE-7524?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kai Zheng updated HBASE-7524:
-----------------------------

    Attachment: HBASE-7524.patch

Simple fix, for review.
                
> hbase-policy.xml is improperly set thus all rules in it can be by-passed
> ------------------------------------------------------------------------
>
>                 Key: HBASE-7524
>                 URL: https://issues.apache.org/jira/browse/HBASE-7524
>             Project: HBase
>          Issue Type: Bug
>          Components: security
>            Reporter: Kai Zheng
>              Labels: hbase, policy
>         Attachments: HBASE-7524.patch
>
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> This should be a code error.
> In HBasePolicyProvider.java, hbase-policy.xml file was set as,
> conf.set("hadoop.policy.file", "hbase-policy.xml");
> But in Hadoop ServiceAuthorizationManager.java, policy file was get as,
>     String policyFile = 
>       System.getProperty("hadoop.policy.file", HADOOP_POLICY_FILE);
> The result is, the mentioned hbase-policy.xml file won't be used, and 
> default hadoop-policy.xml file can be used, which is unexpected.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira