You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hbase.apache.org by gi...@apache.org on 2018/09/18 14:52:13 UTC

[03/18] hbase-site git commit: Published site at cebb725a9f4ab8dd9d3f306d21d53d6f56161c51.

http://git-wip-us.apache.org/repos/asf/hbase-site/blob/ab597584/testdevapidocs/src-html/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabelsWithDefaultVisLabelService.html
----------------------------------------------------------------------
diff --git a/testdevapidocs/src-html/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabelsWithDefaultVisLabelService.html b/testdevapidocs/src-html/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabelsWithDefaultVisLabelService.html
index 6c84f24..1b61e34 100644
--- a/testdevapidocs/src-html/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabelsWithDefaultVisLabelService.html
+++ b/testdevapidocs/src-html/org/apache/hadoop/hbase/security/visibility/TestVisibilityLabelsWithDefaultVisLabelService.html
@@ -30,232 +30,231 @@
 <span class="sourceLineNo">022</span>import static org.junit.Assert.assertEquals;<a name="line.22"></a>
 <span class="sourceLineNo">023</span>import static org.junit.Assert.assertFalse;<a name="line.23"></a>
 <span class="sourceLineNo">024</span>import static org.junit.Assert.assertTrue;<a name="line.24"></a>
-<span class="sourceLineNo">025</span>import static org.junit.Assert.fail;<a name="line.25"></a>
-<span class="sourceLineNo">026</span><a name="line.26"></a>
-<span class="sourceLineNo">027</span>import com.google.protobuf.ByteString;<a name="line.27"></a>
-<span class="sourceLineNo">028</span>import java.io.IOException;<a name="line.28"></a>
-<span class="sourceLineNo">029</span>import java.security.PrivilegedExceptionAction;<a name="line.29"></a>
-<span class="sourceLineNo">030</span>import java.util.List;<a name="line.30"></a>
-<span class="sourceLineNo">031</span>import java.util.concurrent.atomic.AtomicBoolean;<a name="line.31"></a>
-<span class="sourceLineNo">032</span>import org.apache.hadoop.hbase.HBaseClassTestRule;<a name="line.32"></a>
-<span class="sourceLineNo">033</span>import org.apache.hadoop.hbase.TableName;<a name="line.33"></a>
-<span class="sourceLineNo">034</span>import org.apache.hadoop.hbase.client.Connection;<a name="line.34"></a>
-<span class="sourceLineNo">035</span>import org.apache.hadoop.hbase.client.ConnectionFactory;<a name="line.35"></a>
-<span class="sourceLineNo">036</span>import org.apache.hadoop.hbase.client.Result;<a name="line.36"></a>
-<span class="sourceLineNo">037</span>import org.apache.hadoop.hbase.client.ResultScanner;<a name="line.37"></a>
-<span class="sourceLineNo">038</span>import org.apache.hadoop.hbase.client.Scan;<a name="line.38"></a>
-<span class="sourceLineNo">039</span>import org.apache.hadoop.hbase.client.Table;<a name="line.39"></a>
-<span class="sourceLineNo">040</span>import org.apache.hadoop.hbase.protobuf.ProtobufUtil;<a name="line.40"></a>
-<span class="sourceLineNo">041</span>import org.apache.hadoop.hbase.protobuf.generated.ClientProtos.RegionActionResult;<a name="line.41"></a>
-<span class="sourceLineNo">042</span>import org.apache.hadoop.hbase.protobuf.generated.HBaseProtos.NameBytesPair;<a name="line.42"></a>
-<span class="sourceLineNo">043</span>import org.apache.hadoop.hbase.protobuf.generated.VisibilityLabelsProtos.ListLabelsResponse;<a name="line.43"></a>
-<span class="sourceLineNo">044</span>import org.apache.hadoop.hbase.protobuf.generated.VisibilityLabelsProtos.VisibilityLabelsResponse;<a name="line.44"></a>
-<span class="sourceLineNo">045</span>import org.apache.hadoop.hbase.security.User;<a name="line.45"></a>
-<span class="sourceLineNo">046</span>import org.apache.hadoop.hbase.testclassification.MediumTests;<a name="line.46"></a>
-<span class="sourceLineNo">047</span>import org.apache.hadoop.hbase.testclassification.SecurityTests;<a name="line.47"></a>
-<span class="sourceLineNo">048</span>import org.apache.hadoop.hbase.util.Bytes;<a name="line.48"></a>
-<span class="sourceLineNo">049</span>import org.apache.hadoop.hbase.util.JVMClusterUtil.RegionServerThread;<a name="line.49"></a>
-<span class="sourceLineNo">050</span>import org.apache.hadoop.hbase.util.Threads;<a name="line.50"></a>
-<span class="sourceLineNo">051</span>import org.junit.Assert;<a name="line.51"></a>
-<span class="sourceLineNo">052</span>import org.junit.BeforeClass;<a name="line.52"></a>
-<span class="sourceLineNo">053</span>import org.junit.ClassRule;<a name="line.53"></a>
-<span class="sourceLineNo">054</span>import org.junit.Test;<a name="line.54"></a>
-<span class="sourceLineNo">055</span>import org.junit.experimental.categories.Category;<a name="line.55"></a>
-<span class="sourceLineNo">056</span>import org.slf4j.Logger;<a name="line.56"></a>
-<span class="sourceLineNo">057</span>import org.slf4j.LoggerFactory;<a name="line.57"></a>
-<span class="sourceLineNo">058</span><a name="line.58"></a>
-<span class="sourceLineNo">059</span>@Category({SecurityTests.class, MediumTests.class})<a name="line.59"></a>
-<span class="sourceLineNo">060</span>public class TestVisibilityLabelsWithDefaultVisLabelService extends TestVisibilityLabels {<a name="line.60"></a>
-<span class="sourceLineNo">061</span><a name="line.61"></a>
-<span class="sourceLineNo">062</span>  @ClassRule<a name="line.62"></a>
-<span class="sourceLineNo">063</span>  public static final HBaseClassTestRule CLASS_RULE =<a name="line.63"></a>
-<span class="sourceLineNo">064</span>      HBaseClassTestRule.forClass(TestVisibilityLabelsWithDefaultVisLabelService.class);<a name="line.64"></a>
-<span class="sourceLineNo">065</span><a name="line.65"></a>
-<span class="sourceLineNo">066</span>  private static final Logger LOG = LoggerFactory.getLogger(<a name="line.66"></a>
-<span class="sourceLineNo">067</span>    TestVisibilityLabelsWithDefaultVisLabelService.class);<a name="line.67"></a>
-<span class="sourceLineNo">068</span><a name="line.68"></a>
-<span class="sourceLineNo">069</span>  @BeforeClass<a name="line.69"></a>
-<span class="sourceLineNo">070</span>  public static void setupBeforeClass() throws Exception {<a name="line.70"></a>
-<span class="sourceLineNo">071</span>    // setup configuration<a name="line.71"></a>
-<span class="sourceLineNo">072</span>    conf = TEST_UTIL.getConfiguration();<a name="line.72"></a>
-<span class="sourceLineNo">073</span>    VisibilityTestUtil.enableVisiblityLabels(conf);<a name="line.73"></a>
-<span class="sourceLineNo">074</span>    conf.setClass(VisibilityUtils.VISIBILITY_LABEL_GENERATOR_CLASS, SimpleScanLabelGenerator.class,<a name="line.74"></a>
-<span class="sourceLineNo">075</span>        ScanLabelGenerator.class);<a name="line.75"></a>
-<span class="sourceLineNo">076</span>    conf.set("hbase.superuser", "admin");<a name="line.76"></a>
-<span class="sourceLineNo">077</span>    TEST_UTIL.startMiniCluster(2);<a name="line.77"></a>
-<span class="sourceLineNo">078</span>    SUPERUSER = User.createUserForTesting(conf, "admin", new String[] { "supergroup" });<a name="line.78"></a>
-<span class="sourceLineNo">079</span>    USER1 = User.createUserForTesting(conf, "user1", new String[] {});<a name="line.79"></a>
-<span class="sourceLineNo">080</span><a name="line.80"></a>
-<span class="sourceLineNo">081</span>    // Wait for the labels table to become available<a name="line.81"></a>
-<span class="sourceLineNo">082</span>    TEST_UTIL.waitTableEnabled(LABELS_TABLE_NAME.getName(), 50000);<a name="line.82"></a>
-<span class="sourceLineNo">083</span>    addLabels();<a name="line.83"></a>
-<span class="sourceLineNo">084</span>  }<a name="line.84"></a>
-<span class="sourceLineNo">085</span><a name="line.85"></a>
-<span class="sourceLineNo">086</span>  @Test<a name="line.86"></a>
-<span class="sourceLineNo">087</span>  public void testAddLabels() throws Throwable {<a name="line.87"></a>
-<span class="sourceLineNo">088</span>    PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt; action =<a name="line.88"></a>
-<span class="sourceLineNo">089</span>        new PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt;() {<a name="line.89"></a>
-<span class="sourceLineNo">090</span>      @Override<a name="line.90"></a>
-<span class="sourceLineNo">091</span>      public VisibilityLabelsResponse run() throws Exception {<a name="line.91"></a>
-<span class="sourceLineNo">092</span>        String[] labels = { "L1", SECRET, "L2", "invalid~", "L3" };<a name="line.92"></a>
-<span class="sourceLineNo">093</span>        VisibilityLabelsResponse response = null;<a name="line.93"></a>
-<span class="sourceLineNo">094</span>        try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.94"></a>
-<span class="sourceLineNo">095</span>          response = VisibilityClient.addLabels(conn, labels);<a name="line.95"></a>
-<span class="sourceLineNo">096</span>        } catch (Throwable e) {<a name="line.96"></a>
-<span class="sourceLineNo">097</span>          fail("Should not have thrown exception");<a name="line.97"></a>
-<span class="sourceLineNo">098</span>        }<a name="line.98"></a>
-<span class="sourceLineNo">099</span>        List&lt;RegionActionResult&gt; resultList = response.getResultList();<a name="line.99"></a>
-<span class="sourceLineNo">100</span>        assertEquals(5, resultList.size());<a name="line.100"></a>
-<span class="sourceLineNo">101</span>        assertTrue(resultList.get(0).getException().getValue().isEmpty());<a name="line.101"></a>
-<span class="sourceLineNo">102</span>        assertEquals("org.apache.hadoop.hbase.DoNotRetryIOException", resultList.get(1)<a name="line.102"></a>
-<span class="sourceLineNo">103</span>            .getException().getName());<a name="line.103"></a>
-<span class="sourceLineNo">104</span>        assertTrue(Bytes.toString(resultList.get(1).getException().getValue().toByteArray())<a name="line.104"></a>
-<span class="sourceLineNo">105</span>            .contains(<a name="line.105"></a>
-<span class="sourceLineNo">106</span>                "org.apache.hadoop.hbase.security.visibility.LabelAlreadyExistsException: "<a name="line.106"></a>
-<span class="sourceLineNo">107</span>                    + "Label 'secret' already exists"));<a name="line.107"></a>
-<span class="sourceLineNo">108</span>        assertTrue(resultList.get(2).getException().getValue().isEmpty());<a name="line.108"></a>
-<span class="sourceLineNo">109</span>        assertTrue(resultList.get(3).getException().getValue().isEmpty());<a name="line.109"></a>
-<span class="sourceLineNo">110</span>        assertTrue(resultList.get(4).getException().getValue().isEmpty());<a name="line.110"></a>
-<span class="sourceLineNo">111</span>        return null;<a name="line.111"></a>
-<span class="sourceLineNo">112</span>      }<a name="line.112"></a>
-<span class="sourceLineNo">113</span>    };<a name="line.113"></a>
-<span class="sourceLineNo">114</span>    SUPERUSER.runAs(action);<a name="line.114"></a>
-<span class="sourceLineNo">115</span>  }<a name="line.115"></a>
-<span class="sourceLineNo">116</span><a name="line.116"></a>
-<span class="sourceLineNo">117</span>  @Test<a name="line.117"></a>
-<span class="sourceLineNo">118</span>  public void testAddVisibilityLabelsOnRSRestart() throws Exception {<a name="line.118"></a>
-<span class="sourceLineNo">119</span>    List&lt;RegionServerThread&gt; regionServerThreads = TEST_UTIL.getHBaseCluster()<a name="line.119"></a>
-<span class="sourceLineNo">120</span>        .getRegionServerThreads();<a name="line.120"></a>
-<span class="sourceLineNo">121</span>    for (RegionServerThread rsThread : regionServerThreads) {<a name="line.121"></a>
-<span class="sourceLineNo">122</span>      rsThread.getRegionServer().abort("Aborting ");<a name="line.122"></a>
-<span class="sourceLineNo">123</span>    }<a name="line.123"></a>
-<span class="sourceLineNo">124</span>    // Start one new RS<a name="line.124"></a>
-<span class="sourceLineNo">125</span>    RegionServerThread rs = TEST_UTIL.getHBaseCluster().startRegionServer();<a name="line.125"></a>
-<span class="sourceLineNo">126</span>    waitForLabelsRegionAvailability(rs.getRegionServer());<a name="line.126"></a>
-<span class="sourceLineNo">127</span>    final AtomicBoolean vcInitialized = new AtomicBoolean(true);<a name="line.127"></a>
-<span class="sourceLineNo">128</span>    do {<a name="line.128"></a>
-<span class="sourceLineNo">129</span>      PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt; action =<a name="line.129"></a>
-<span class="sourceLineNo">130</span>          new PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt;() {<a name="line.130"></a>
-<span class="sourceLineNo">131</span>        @Override<a name="line.131"></a>
-<span class="sourceLineNo">132</span>        public VisibilityLabelsResponse run() throws Exception {<a name="line.132"></a>
-<span class="sourceLineNo">133</span>          String[] labels = { SECRET, CONFIDENTIAL, PRIVATE, "ABC", "XYZ" };<a name="line.133"></a>
-<span class="sourceLineNo">134</span>          try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.134"></a>
-<span class="sourceLineNo">135</span>            VisibilityLabelsResponse resp = VisibilityClient.addLabels(conn, labels);<a name="line.135"></a>
-<span class="sourceLineNo">136</span>            List&lt;RegionActionResult&gt; results = resp.getResultList();<a name="line.136"></a>
-<span class="sourceLineNo">137</span>            if (results.get(0).hasException()) {<a name="line.137"></a>
-<span class="sourceLineNo">138</span>              NameBytesPair pair = results.get(0).getException();<a name="line.138"></a>
-<span class="sourceLineNo">139</span>              Throwable t = ProtobufUtil.toException(pair);<a name="line.139"></a>
-<span class="sourceLineNo">140</span>              LOG.debug("Got exception writing labels", t);<a name="line.140"></a>
-<span class="sourceLineNo">141</span>              if (t instanceof VisibilityControllerNotReadyException) {<a name="line.141"></a>
-<span class="sourceLineNo">142</span>                vcInitialized.set(false);<a name="line.142"></a>
-<span class="sourceLineNo">143</span>                LOG.warn("VisibilityController was not yet initialized");<a name="line.143"></a>
-<span class="sourceLineNo">144</span>                Threads.sleep(10);<a name="line.144"></a>
-<span class="sourceLineNo">145</span>              } else {<a name="line.145"></a>
-<span class="sourceLineNo">146</span>                vcInitialized.set(true);<a name="line.146"></a>
-<span class="sourceLineNo">147</span>              }<a name="line.147"></a>
-<span class="sourceLineNo">148</span>            } else LOG.debug("new labels added: " + resp);<a name="line.148"></a>
-<span class="sourceLineNo">149</span>          } catch (Throwable t) {<a name="line.149"></a>
-<span class="sourceLineNo">150</span>            throw new IOException(t);<a name="line.150"></a>
-<span class="sourceLineNo">151</span>          }<a name="line.151"></a>
-<span class="sourceLineNo">152</span>          return null;<a name="line.152"></a>
-<span class="sourceLineNo">153</span>        }<a name="line.153"></a>
-<span class="sourceLineNo">154</span>      };<a name="line.154"></a>
-<span class="sourceLineNo">155</span>      SUPERUSER.runAs(action);<a name="line.155"></a>
-<span class="sourceLineNo">156</span>    } while (!vcInitialized.get());<a name="line.156"></a>
-<span class="sourceLineNo">157</span>    // Scan the visibility label<a name="line.157"></a>
-<span class="sourceLineNo">158</span>    Scan s = new Scan();<a name="line.158"></a>
-<span class="sourceLineNo">159</span>    s.setAuthorizations(new Authorizations(VisibilityUtils.SYSTEM_LABEL));<a name="line.159"></a>
-<span class="sourceLineNo">160</span><a name="line.160"></a>
-<span class="sourceLineNo">161</span>    int i = 0;<a name="line.161"></a>
-<span class="sourceLineNo">162</span>    try (Table ht = TEST_UTIL.getConnection().getTable(LABELS_TABLE_NAME);<a name="line.162"></a>
-<span class="sourceLineNo">163</span>         ResultScanner scanner = ht.getScanner(s)) {<a name="line.163"></a>
-<span class="sourceLineNo">164</span>      while (true) {<a name="line.164"></a>
-<span class="sourceLineNo">165</span>        Result next = scanner.next();<a name="line.165"></a>
-<span class="sourceLineNo">166</span>        if (next == null) {<a name="line.166"></a>
-<span class="sourceLineNo">167</span>          break;<a name="line.167"></a>
-<span class="sourceLineNo">168</span>        }<a name="line.168"></a>
-<span class="sourceLineNo">169</span>        i++;<a name="line.169"></a>
-<span class="sourceLineNo">170</span>      }<a name="line.170"></a>
-<span class="sourceLineNo">171</span>    }<a name="line.171"></a>
-<span class="sourceLineNo">172</span>    // One label is the "system" label.<a name="line.172"></a>
-<span class="sourceLineNo">173</span>    Assert.assertEquals("The count should be 13", 13, i);<a name="line.173"></a>
-<span class="sourceLineNo">174</span>  }<a name="line.174"></a>
-<span class="sourceLineNo">175</span><a name="line.175"></a>
-<span class="sourceLineNo">176</span>  @Test<a name="line.176"></a>
-<span class="sourceLineNo">177</span>  public void testListLabels() throws Throwable {<a name="line.177"></a>
-<span class="sourceLineNo">178</span>    PrivilegedExceptionAction&lt;ListLabelsResponse&gt; action =<a name="line.178"></a>
-<span class="sourceLineNo">179</span>        new PrivilegedExceptionAction&lt;ListLabelsResponse&gt;() {<a name="line.179"></a>
-<span class="sourceLineNo">180</span>      @Override<a name="line.180"></a>
-<span class="sourceLineNo">181</span>      public ListLabelsResponse run() throws Exception {<a name="line.181"></a>
-<span class="sourceLineNo">182</span>        ListLabelsResponse response = null;<a name="line.182"></a>
-<span class="sourceLineNo">183</span>        try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.183"></a>
-<span class="sourceLineNo">184</span>          response = VisibilityClient.listLabels(conn, null);<a name="line.184"></a>
-<span class="sourceLineNo">185</span>        } catch (Throwable e) {<a name="line.185"></a>
-<span class="sourceLineNo">186</span>          fail("Should not have thrown exception");<a name="line.186"></a>
-<span class="sourceLineNo">187</span>        }<a name="line.187"></a>
-<span class="sourceLineNo">188</span>        // The addLabels() in setup added:<a name="line.188"></a>
-<span class="sourceLineNo">189</span>        // { SECRET, TOPSECRET, CONFIDENTIAL, PUBLIC, PRIVATE, COPYRIGHT, ACCENT,<a name="line.189"></a>
-<span class="sourceLineNo">190</span>        //  UNICODE_VIS_TAG, UC1, UC2 };<a name="line.190"></a>
-<span class="sourceLineNo">191</span>        // The previous tests added 2 more labels: ABC, XYZ<a name="line.191"></a>
-<span class="sourceLineNo">192</span>        // The 'system' label is excluded.<a name="line.192"></a>
-<span class="sourceLineNo">193</span>        List&lt;ByteString&gt; labels = response.getLabelList();<a name="line.193"></a>
-<span class="sourceLineNo">194</span>        assertEquals(12, labels.size());<a name="line.194"></a>
-<span class="sourceLineNo">195</span>        assertTrue(labels.contains(ByteString.copyFrom(SECRET.getBytes())));<a name="line.195"></a>
-<span class="sourceLineNo">196</span>        assertTrue(labels.contains(ByteString.copyFrom(TOPSECRET.getBytes())));<a name="line.196"></a>
-<span class="sourceLineNo">197</span>        assertTrue(labels.contains(ByteString.copyFrom(CONFIDENTIAL.getBytes())));<a name="line.197"></a>
-<span class="sourceLineNo">198</span>        assertTrue(labels.contains(ByteString.copyFrom("ABC".getBytes())));<a name="line.198"></a>
-<span class="sourceLineNo">199</span>        assertTrue(labels.contains(ByteString.copyFrom("XYZ".getBytes())));<a name="line.199"></a>
-<span class="sourceLineNo">200</span>        assertFalse(labels.contains(ByteString.copyFrom(SYSTEM_LABEL.getBytes())));<a name="line.200"></a>
-<span class="sourceLineNo">201</span>        return null;<a name="line.201"></a>
-<span class="sourceLineNo">202</span>      }<a name="line.202"></a>
-<span class="sourceLineNo">203</span>    };<a name="line.203"></a>
-<span class="sourceLineNo">204</span>    SUPERUSER.runAs(action);<a name="line.204"></a>
-<span class="sourceLineNo">205</span>  }<a name="line.205"></a>
-<span class="sourceLineNo">206</span><a name="line.206"></a>
-<span class="sourceLineNo">207</span>  @Test<a name="line.207"></a>
-<span class="sourceLineNo">208</span>  public void testListLabelsWithRegEx() throws Throwable {<a name="line.208"></a>
-<span class="sourceLineNo">209</span>    PrivilegedExceptionAction&lt;ListLabelsResponse&gt; action =<a name="line.209"></a>
-<span class="sourceLineNo">210</span>        new PrivilegedExceptionAction&lt;ListLabelsResponse&gt;() {<a name="line.210"></a>
-<span class="sourceLineNo">211</span>      @Override<a name="line.211"></a>
-<span class="sourceLineNo">212</span>      public ListLabelsResponse run() throws Exception {<a name="line.212"></a>
-<span class="sourceLineNo">213</span>        ListLabelsResponse response = null;<a name="line.213"></a>
-<span class="sourceLineNo">214</span>        try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.214"></a>
-<span class="sourceLineNo">215</span>          response = VisibilityClient.listLabels(conn, ".*secret");<a name="line.215"></a>
-<span class="sourceLineNo">216</span>        } catch (Throwable e) {<a name="line.216"></a>
-<span class="sourceLineNo">217</span>          fail("Should not have thrown exception");<a name="line.217"></a>
-<span class="sourceLineNo">218</span>        }<a name="line.218"></a>
-<span class="sourceLineNo">219</span>        // Only return the labels that end with 'secret'<a name="line.219"></a>
-<span class="sourceLineNo">220</span>        List&lt;ByteString&gt; labels = response.getLabelList();<a name="line.220"></a>
-<span class="sourceLineNo">221</span>        assertEquals(2, labels.size());<a name="line.221"></a>
-<span class="sourceLineNo">222</span>        assertTrue(labels.contains(ByteString.copyFrom(SECRET.getBytes())));<a name="line.222"></a>
-<span class="sourceLineNo">223</span>        assertTrue(labels.contains(ByteString.copyFrom(TOPSECRET.getBytes())));<a name="line.223"></a>
-<span class="sourceLineNo">224</span>        return null;<a name="line.224"></a>
-<span class="sourceLineNo">225</span>      }<a name="line.225"></a>
-<span class="sourceLineNo">226</span>    };<a name="line.226"></a>
-<span class="sourceLineNo">227</span>    SUPERUSER.runAs(action);<a name="line.227"></a>
-<span class="sourceLineNo">228</span>  }<a name="line.228"></a>
-<span class="sourceLineNo">229</span><a name="line.229"></a>
-<span class="sourceLineNo">230</span>  @Test<a name="line.230"></a>
-<span class="sourceLineNo">231</span>  public void testVisibilityLabelsOnWALReplay() throws Exception {<a name="line.231"></a>
-<span class="sourceLineNo">232</span>    final TableName tableName = TableName.valueOf(TEST_NAME.getMethodName());<a name="line.232"></a>
-<span class="sourceLineNo">233</span>    try (Table table = createTableAndWriteDataWithLabels(tableName,<a name="line.233"></a>
-<span class="sourceLineNo">234</span>        "(" + SECRET + "|" + CONFIDENTIAL + ")", PRIVATE)) {<a name="line.234"></a>
-<span class="sourceLineNo">235</span>      List&lt;RegionServerThread&gt; regionServerThreads = TEST_UTIL.getHBaseCluster()<a name="line.235"></a>
-<span class="sourceLineNo">236</span>          .getRegionServerThreads();<a name="line.236"></a>
-<span class="sourceLineNo">237</span>      for (RegionServerThread rsThread : regionServerThreads) {<a name="line.237"></a>
-<span class="sourceLineNo">238</span>        rsThread.getRegionServer().abort("Aborting ");<a name="line.238"></a>
-<span class="sourceLineNo">239</span>      }<a name="line.239"></a>
-<span class="sourceLineNo">240</span>      // Start one new RS<a name="line.240"></a>
-<span class="sourceLineNo">241</span>      RegionServerThread rs = TEST_UTIL.getHBaseCluster().startRegionServer();<a name="line.241"></a>
-<span class="sourceLineNo">242</span>      waitForLabelsRegionAvailability(rs.getRegionServer());<a name="line.242"></a>
-<span class="sourceLineNo">243</span>      Scan s = new Scan();<a name="line.243"></a>
-<span class="sourceLineNo">244</span>      s.setAuthorizations(new Authorizations(SECRET));<a name="line.244"></a>
-<span class="sourceLineNo">245</span>      ResultScanner scanner = table.getScanner(s);<a name="line.245"></a>
-<span class="sourceLineNo">246</span>      Result[] next = scanner.next(3);<a name="line.246"></a>
-<span class="sourceLineNo">247</span>      assertTrue(next.length == 1);<a name="line.247"></a>
-<span class="sourceLineNo">248</span>    }<a name="line.248"></a>
-<span class="sourceLineNo">249</span>  }<a name="line.249"></a>
-<span class="sourceLineNo">250</span>}<a name="line.250"></a>
+<span class="sourceLineNo">025</span><a name="line.25"></a>
+<span class="sourceLineNo">026</span>import com.google.protobuf.ByteString;<a name="line.26"></a>
+<span class="sourceLineNo">027</span>import java.io.IOException;<a name="line.27"></a>
+<span class="sourceLineNo">028</span>import java.security.PrivilegedExceptionAction;<a name="line.28"></a>
+<span class="sourceLineNo">029</span>import java.util.List;<a name="line.29"></a>
+<span class="sourceLineNo">030</span>import java.util.concurrent.atomic.AtomicBoolean;<a name="line.30"></a>
+<span class="sourceLineNo">031</span>import org.apache.hadoop.hbase.HBaseClassTestRule;<a name="line.31"></a>
+<span class="sourceLineNo">032</span>import org.apache.hadoop.hbase.TableName;<a name="line.32"></a>
+<span class="sourceLineNo">033</span>import org.apache.hadoop.hbase.client.Connection;<a name="line.33"></a>
+<span class="sourceLineNo">034</span>import org.apache.hadoop.hbase.client.ConnectionFactory;<a name="line.34"></a>
+<span class="sourceLineNo">035</span>import org.apache.hadoop.hbase.client.Result;<a name="line.35"></a>
+<span class="sourceLineNo">036</span>import org.apache.hadoop.hbase.client.ResultScanner;<a name="line.36"></a>
+<span class="sourceLineNo">037</span>import org.apache.hadoop.hbase.client.Scan;<a name="line.37"></a>
+<span class="sourceLineNo">038</span>import org.apache.hadoop.hbase.client.Table;<a name="line.38"></a>
+<span class="sourceLineNo">039</span>import org.apache.hadoop.hbase.protobuf.ProtobufUtil;<a name="line.39"></a>
+<span class="sourceLineNo">040</span>import org.apache.hadoop.hbase.protobuf.generated.ClientProtos.RegionActionResult;<a name="line.40"></a>
+<span class="sourceLineNo">041</span>import org.apache.hadoop.hbase.protobuf.generated.HBaseProtos.NameBytesPair;<a name="line.41"></a>
+<span class="sourceLineNo">042</span>import org.apache.hadoop.hbase.protobuf.generated.VisibilityLabelsProtos.ListLabelsResponse;<a name="line.42"></a>
+<span class="sourceLineNo">043</span>import org.apache.hadoop.hbase.protobuf.generated.VisibilityLabelsProtos.VisibilityLabelsResponse;<a name="line.43"></a>
+<span class="sourceLineNo">044</span>import org.apache.hadoop.hbase.security.User;<a name="line.44"></a>
+<span class="sourceLineNo">045</span>import org.apache.hadoop.hbase.testclassification.MediumTests;<a name="line.45"></a>
+<span class="sourceLineNo">046</span>import org.apache.hadoop.hbase.testclassification.SecurityTests;<a name="line.46"></a>
+<span class="sourceLineNo">047</span>import org.apache.hadoop.hbase.util.Bytes;<a name="line.47"></a>
+<span class="sourceLineNo">048</span>import org.apache.hadoop.hbase.util.JVMClusterUtil.RegionServerThread;<a name="line.48"></a>
+<span class="sourceLineNo">049</span>import org.apache.hadoop.hbase.util.Threads;<a name="line.49"></a>
+<span class="sourceLineNo">050</span>import org.junit.Assert;<a name="line.50"></a>
+<span class="sourceLineNo">051</span>import org.junit.BeforeClass;<a name="line.51"></a>
+<span class="sourceLineNo">052</span>import org.junit.ClassRule;<a name="line.52"></a>
+<span class="sourceLineNo">053</span>import org.junit.Test;<a name="line.53"></a>
+<span class="sourceLineNo">054</span>import org.junit.experimental.categories.Category;<a name="line.54"></a>
+<span class="sourceLineNo">055</span>import org.slf4j.Logger;<a name="line.55"></a>
+<span class="sourceLineNo">056</span>import org.slf4j.LoggerFactory;<a name="line.56"></a>
+<span class="sourceLineNo">057</span><a name="line.57"></a>
+<span class="sourceLineNo">058</span>@Category({SecurityTests.class, MediumTests.class})<a name="line.58"></a>
+<span class="sourceLineNo">059</span>public class TestVisibilityLabelsWithDefaultVisLabelService extends TestVisibilityLabels {<a name="line.59"></a>
+<span class="sourceLineNo">060</span><a name="line.60"></a>
+<span class="sourceLineNo">061</span>  @ClassRule<a name="line.61"></a>
+<span class="sourceLineNo">062</span>  public static final HBaseClassTestRule CLASS_RULE =<a name="line.62"></a>
+<span class="sourceLineNo">063</span>      HBaseClassTestRule.forClass(TestVisibilityLabelsWithDefaultVisLabelService.class);<a name="line.63"></a>
+<span class="sourceLineNo">064</span><a name="line.64"></a>
+<span class="sourceLineNo">065</span>  private static final Logger LOG = LoggerFactory.getLogger(<a name="line.65"></a>
+<span class="sourceLineNo">066</span>    TestVisibilityLabelsWithDefaultVisLabelService.class);<a name="line.66"></a>
+<span class="sourceLineNo">067</span><a name="line.67"></a>
+<span class="sourceLineNo">068</span>  @BeforeClass<a name="line.68"></a>
+<span class="sourceLineNo">069</span>  public static void setupBeforeClass() throws Exception {<a name="line.69"></a>
+<span class="sourceLineNo">070</span>    // setup configuration<a name="line.70"></a>
+<span class="sourceLineNo">071</span>    conf = TEST_UTIL.getConfiguration();<a name="line.71"></a>
+<span class="sourceLineNo">072</span>    VisibilityTestUtil.enableVisiblityLabels(conf);<a name="line.72"></a>
+<span class="sourceLineNo">073</span>    conf.setClass(VisibilityUtils.VISIBILITY_LABEL_GENERATOR_CLASS, SimpleScanLabelGenerator.class,<a name="line.73"></a>
+<span class="sourceLineNo">074</span>        ScanLabelGenerator.class);<a name="line.74"></a>
+<span class="sourceLineNo">075</span>    conf.set("hbase.superuser", "admin");<a name="line.75"></a>
+<span class="sourceLineNo">076</span>    TEST_UTIL.startMiniCluster(2);<a name="line.76"></a>
+<span class="sourceLineNo">077</span>    SUPERUSER = User.createUserForTesting(conf, "admin", new String[] { "supergroup" });<a name="line.77"></a>
+<span class="sourceLineNo">078</span>    USER1 = User.createUserForTesting(conf, "user1", new String[] {});<a name="line.78"></a>
+<span class="sourceLineNo">079</span><a name="line.79"></a>
+<span class="sourceLineNo">080</span>    // Wait for the labels table to become available<a name="line.80"></a>
+<span class="sourceLineNo">081</span>    TEST_UTIL.waitTableEnabled(LABELS_TABLE_NAME.getName(), 50000);<a name="line.81"></a>
+<span class="sourceLineNo">082</span>    addLabels();<a name="line.82"></a>
+<span class="sourceLineNo">083</span>  }<a name="line.83"></a>
+<span class="sourceLineNo">084</span><a name="line.84"></a>
+<span class="sourceLineNo">085</span>  @Test<a name="line.85"></a>
+<span class="sourceLineNo">086</span>  public void testAddLabels() throws Throwable {<a name="line.86"></a>
+<span class="sourceLineNo">087</span>    PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt; action =<a name="line.87"></a>
+<span class="sourceLineNo">088</span>        new PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt;() {<a name="line.88"></a>
+<span class="sourceLineNo">089</span>      @Override<a name="line.89"></a>
+<span class="sourceLineNo">090</span>      public VisibilityLabelsResponse run() throws Exception {<a name="line.90"></a>
+<span class="sourceLineNo">091</span>        String[] labels = { "L1", SECRET, "L2", "invalid~", "L3" };<a name="line.91"></a>
+<span class="sourceLineNo">092</span>        VisibilityLabelsResponse response = null;<a name="line.92"></a>
+<span class="sourceLineNo">093</span>        try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.93"></a>
+<span class="sourceLineNo">094</span>          response = VisibilityClient.addLabels(conn, labels);<a name="line.94"></a>
+<span class="sourceLineNo">095</span>        } catch (Throwable e) {<a name="line.95"></a>
+<span class="sourceLineNo">096</span>          throw new IOException(e);<a name="line.96"></a>
+<span class="sourceLineNo">097</span>        }<a name="line.97"></a>
+<span class="sourceLineNo">098</span>        List&lt;RegionActionResult&gt; resultList = response.getResultList();<a name="line.98"></a>
+<span class="sourceLineNo">099</span>        assertEquals(5, resultList.size());<a name="line.99"></a>
+<span class="sourceLineNo">100</span>        assertTrue(resultList.get(0).getException().getValue().isEmpty());<a name="line.100"></a>
+<span class="sourceLineNo">101</span>        assertEquals("org.apache.hadoop.hbase.DoNotRetryIOException", resultList.get(1)<a name="line.101"></a>
+<span class="sourceLineNo">102</span>            .getException().getName());<a name="line.102"></a>
+<span class="sourceLineNo">103</span>        assertTrue(Bytes.toString(resultList.get(1).getException().getValue().toByteArray())<a name="line.103"></a>
+<span class="sourceLineNo">104</span>            .contains(<a name="line.104"></a>
+<span class="sourceLineNo">105</span>                "org.apache.hadoop.hbase.security.visibility.LabelAlreadyExistsException: "<a name="line.105"></a>
+<span class="sourceLineNo">106</span>                    + "Label 'secret' already exists"));<a name="line.106"></a>
+<span class="sourceLineNo">107</span>        assertTrue(resultList.get(2).getException().getValue().isEmpty());<a name="line.107"></a>
+<span class="sourceLineNo">108</span>        assertTrue(resultList.get(3).getException().getValue().isEmpty());<a name="line.108"></a>
+<span class="sourceLineNo">109</span>        assertTrue(resultList.get(4).getException().getValue().isEmpty());<a name="line.109"></a>
+<span class="sourceLineNo">110</span>        return null;<a name="line.110"></a>
+<span class="sourceLineNo">111</span>      }<a name="line.111"></a>
+<span class="sourceLineNo">112</span>    };<a name="line.112"></a>
+<span class="sourceLineNo">113</span>    SUPERUSER.runAs(action);<a name="line.113"></a>
+<span class="sourceLineNo">114</span>  }<a name="line.114"></a>
+<span class="sourceLineNo">115</span><a name="line.115"></a>
+<span class="sourceLineNo">116</span>  @Test<a name="line.116"></a>
+<span class="sourceLineNo">117</span>  public void testAddVisibilityLabelsOnRSRestart() throws Exception {<a name="line.117"></a>
+<span class="sourceLineNo">118</span>    List&lt;RegionServerThread&gt; regionServerThreads = TEST_UTIL.getHBaseCluster()<a name="line.118"></a>
+<span class="sourceLineNo">119</span>        .getRegionServerThreads();<a name="line.119"></a>
+<span class="sourceLineNo">120</span>    for (RegionServerThread rsThread : regionServerThreads) {<a name="line.120"></a>
+<span class="sourceLineNo">121</span>      rsThread.getRegionServer().abort("Aborting ");<a name="line.121"></a>
+<span class="sourceLineNo">122</span>    }<a name="line.122"></a>
+<span class="sourceLineNo">123</span>    // Start one new RS<a name="line.123"></a>
+<span class="sourceLineNo">124</span>    RegionServerThread rs = TEST_UTIL.getHBaseCluster().startRegionServer();<a name="line.124"></a>
+<span class="sourceLineNo">125</span>    waitForLabelsRegionAvailability(rs.getRegionServer());<a name="line.125"></a>
+<span class="sourceLineNo">126</span>    final AtomicBoolean vcInitialized = new AtomicBoolean(true);<a name="line.126"></a>
+<span class="sourceLineNo">127</span>    do {<a name="line.127"></a>
+<span class="sourceLineNo">128</span>      PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt; action =<a name="line.128"></a>
+<span class="sourceLineNo">129</span>          new PrivilegedExceptionAction&lt;VisibilityLabelsResponse&gt;() {<a name="line.129"></a>
+<span class="sourceLineNo">130</span>        @Override<a name="line.130"></a>
+<span class="sourceLineNo">131</span>        public VisibilityLabelsResponse run() throws Exception {<a name="line.131"></a>
+<span class="sourceLineNo">132</span>          String[] labels = { SECRET, CONFIDENTIAL, PRIVATE, "ABC", "XYZ" };<a name="line.132"></a>
+<span class="sourceLineNo">133</span>          try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.133"></a>
+<span class="sourceLineNo">134</span>            VisibilityLabelsResponse resp = VisibilityClient.addLabels(conn, labels);<a name="line.134"></a>
+<span class="sourceLineNo">135</span>            List&lt;RegionActionResult&gt; results = resp.getResultList();<a name="line.135"></a>
+<span class="sourceLineNo">136</span>            if (results.get(0).hasException()) {<a name="line.136"></a>
+<span class="sourceLineNo">137</span>              NameBytesPair pair = results.get(0).getException();<a name="line.137"></a>
+<span class="sourceLineNo">138</span>              Throwable t = ProtobufUtil.toException(pair);<a name="line.138"></a>
+<span class="sourceLineNo">139</span>              LOG.debug("Got exception writing labels", t);<a name="line.139"></a>
+<span class="sourceLineNo">140</span>              if (t instanceof VisibilityControllerNotReadyException) {<a name="line.140"></a>
+<span class="sourceLineNo">141</span>                vcInitialized.set(false);<a name="line.141"></a>
+<span class="sourceLineNo">142</span>                LOG.warn("VisibilityController was not yet initialized");<a name="line.142"></a>
+<span class="sourceLineNo">143</span>                Threads.sleep(10);<a name="line.143"></a>
+<span class="sourceLineNo">144</span>              } else {<a name="line.144"></a>
+<span class="sourceLineNo">145</span>                vcInitialized.set(true);<a name="line.145"></a>
+<span class="sourceLineNo">146</span>              }<a name="line.146"></a>
+<span class="sourceLineNo">147</span>            } else LOG.debug("new labels added: " + resp);<a name="line.147"></a>
+<span class="sourceLineNo">148</span>          } catch (Throwable t) {<a name="line.148"></a>
+<span class="sourceLineNo">149</span>            throw new IOException(t);<a name="line.149"></a>
+<span class="sourceLineNo">150</span>          }<a name="line.150"></a>
+<span class="sourceLineNo">151</span>          return null;<a name="line.151"></a>
+<span class="sourceLineNo">152</span>        }<a name="line.152"></a>
+<span class="sourceLineNo">153</span>      };<a name="line.153"></a>
+<span class="sourceLineNo">154</span>      SUPERUSER.runAs(action);<a name="line.154"></a>
+<span class="sourceLineNo">155</span>    } while (!vcInitialized.get());<a name="line.155"></a>
+<span class="sourceLineNo">156</span>    // Scan the visibility label<a name="line.156"></a>
+<span class="sourceLineNo">157</span>    Scan s = new Scan();<a name="line.157"></a>
+<span class="sourceLineNo">158</span>    s.setAuthorizations(new Authorizations(VisibilityUtils.SYSTEM_LABEL));<a name="line.158"></a>
+<span class="sourceLineNo">159</span><a name="line.159"></a>
+<span class="sourceLineNo">160</span>    int i = 0;<a name="line.160"></a>
+<span class="sourceLineNo">161</span>    try (Table ht = TEST_UTIL.getConnection().getTable(LABELS_TABLE_NAME);<a name="line.161"></a>
+<span class="sourceLineNo">162</span>         ResultScanner scanner = ht.getScanner(s)) {<a name="line.162"></a>
+<span class="sourceLineNo">163</span>      while (true) {<a name="line.163"></a>
+<span class="sourceLineNo">164</span>        Result next = scanner.next();<a name="line.164"></a>
+<span class="sourceLineNo">165</span>        if (next == null) {<a name="line.165"></a>
+<span class="sourceLineNo">166</span>          break;<a name="line.166"></a>
+<span class="sourceLineNo">167</span>        }<a name="line.167"></a>
+<span class="sourceLineNo">168</span>        i++;<a name="line.168"></a>
+<span class="sourceLineNo">169</span>      }<a name="line.169"></a>
+<span class="sourceLineNo">170</span>    }<a name="line.170"></a>
+<span class="sourceLineNo">171</span>    // One label is the "system" label.<a name="line.171"></a>
+<span class="sourceLineNo">172</span>    Assert.assertEquals("The count should be 13", 13, i);<a name="line.172"></a>
+<span class="sourceLineNo">173</span>  }<a name="line.173"></a>
+<span class="sourceLineNo">174</span><a name="line.174"></a>
+<span class="sourceLineNo">175</span>  @Test<a name="line.175"></a>
+<span class="sourceLineNo">176</span>  public void testListLabels() throws Throwable {<a name="line.176"></a>
+<span class="sourceLineNo">177</span>    PrivilegedExceptionAction&lt;ListLabelsResponse&gt; action =<a name="line.177"></a>
+<span class="sourceLineNo">178</span>        new PrivilegedExceptionAction&lt;ListLabelsResponse&gt;() {<a name="line.178"></a>
+<span class="sourceLineNo">179</span>      @Override<a name="line.179"></a>
+<span class="sourceLineNo">180</span>      public ListLabelsResponse run() throws Exception {<a name="line.180"></a>
+<span class="sourceLineNo">181</span>        ListLabelsResponse response = null;<a name="line.181"></a>
+<span class="sourceLineNo">182</span>        try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.182"></a>
+<span class="sourceLineNo">183</span>          response = VisibilityClient.listLabels(conn, null);<a name="line.183"></a>
+<span class="sourceLineNo">184</span>        } catch (Throwable e) {<a name="line.184"></a>
+<span class="sourceLineNo">185</span>          throw new IOException(e);<a name="line.185"></a>
+<span class="sourceLineNo">186</span>        }<a name="line.186"></a>
+<span class="sourceLineNo">187</span>        // The addLabels() in setup added:<a name="line.187"></a>
+<span class="sourceLineNo">188</span>        // { SECRET, TOPSECRET, CONFIDENTIAL, PUBLIC, PRIVATE, COPYRIGHT, ACCENT,<a name="line.188"></a>
+<span class="sourceLineNo">189</span>        //  UNICODE_VIS_TAG, UC1, UC2 };<a name="line.189"></a>
+<span class="sourceLineNo">190</span>        // The previous tests added 2 more labels: ABC, XYZ<a name="line.190"></a>
+<span class="sourceLineNo">191</span>        // The 'system' label is excluded.<a name="line.191"></a>
+<span class="sourceLineNo">192</span>        List&lt;ByteString&gt; labels = response.getLabelList();<a name="line.192"></a>
+<span class="sourceLineNo">193</span>        assertEquals(12, labels.size());<a name="line.193"></a>
+<span class="sourceLineNo">194</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes(SECRET))));<a name="line.194"></a>
+<span class="sourceLineNo">195</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes(TOPSECRET))));<a name="line.195"></a>
+<span class="sourceLineNo">196</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes(CONFIDENTIAL))));<a name="line.196"></a>
+<span class="sourceLineNo">197</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes("ABC"))));<a name="line.197"></a>
+<span class="sourceLineNo">198</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes("XYZ"))));<a name="line.198"></a>
+<span class="sourceLineNo">199</span>        assertFalse(labels.contains(ByteString.copyFrom(Bytes.toBytes(SYSTEM_LABEL))));<a name="line.199"></a>
+<span class="sourceLineNo">200</span>        return null;<a name="line.200"></a>
+<span class="sourceLineNo">201</span>      }<a name="line.201"></a>
+<span class="sourceLineNo">202</span>    };<a name="line.202"></a>
+<span class="sourceLineNo">203</span>    SUPERUSER.runAs(action);<a name="line.203"></a>
+<span class="sourceLineNo">204</span>  }<a name="line.204"></a>
+<span class="sourceLineNo">205</span><a name="line.205"></a>
+<span class="sourceLineNo">206</span>  @Test<a name="line.206"></a>
+<span class="sourceLineNo">207</span>  public void testListLabelsWithRegEx() throws Throwable {<a name="line.207"></a>
+<span class="sourceLineNo">208</span>    PrivilegedExceptionAction&lt;ListLabelsResponse&gt; action =<a name="line.208"></a>
+<span class="sourceLineNo">209</span>        new PrivilegedExceptionAction&lt;ListLabelsResponse&gt;() {<a name="line.209"></a>
+<span class="sourceLineNo">210</span>      @Override<a name="line.210"></a>
+<span class="sourceLineNo">211</span>      public ListLabelsResponse run() throws Exception {<a name="line.211"></a>
+<span class="sourceLineNo">212</span>        ListLabelsResponse response = null;<a name="line.212"></a>
+<span class="sourceLineNo">213</span>        try (Connection conn = ConnectionFactory.createConnection(conf)) {<a name="line.213"></a>
+<span class="sourceLineNo">214</span>          response = VisibilityClient.listLabels(conn, ".*secret");<a name="line.214"></a>
+<span class="sourceLineNo">215</span>        } catch (Throwable e) {<a name="line.215"></a>
+<span class="sourceLineNo">216</span>          throw new IOException(e);<a name="line.216"></a>
+<span class="sourceLineNo">217</span>        }<a name="line.217"></a>
+<span class="sourceLineNo">218</span>        // Only return the labels that end with 'secret'<a name="line.218"></a>
+<span class="sourceLineNo">219</span>        List&lt;ByteString&gt; labels = response.getLabelList();<a name="line.219"></a>
+<span class="sourceLineNo">220</span>        assertEquals(2, labels.size());<a name="line.220"></a>
+<span class="sourceLineNo">221</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes(SECRET))));<a name="line.221"></a>
+<span class="sourceLineNo">222</span>        assertTrue(labels.contains(ByteString.copyFrom(Bytes.toBytes(TOPSECRET))));<a name="line.222"></a>
+<span class="sourceLineNo">223</span>        return null;<a name="line.223"></a>
+<span class="sourceLineNo">224</span>      }<a name="line.224"></a>
+<span class="sourceLineNo">225</span>    };<a name="line.225"></a>
+<span class="sourceLineNo">226</span>    SUPERUSER.runAs(action);<a name="line.226"></a>
+<span class="sourceLineNo">227</span>  }<a name="line.227"></a>
+<span class="sourceLineNo">228</span><a name="line.228"></a>
+<span class="sourceLineNo">229</span>  @Test<a name="line.229"></a>
+<span class="sourceLineNo">230</span>  public void testVisibilityLabelsOnWALReplay() throws Exception {<a name="line.230"></a>
+<span class="sourceLineNo">231</span>    final TableName tableName = TableName.valueOf(TEST_NAME.getMethodName());<a name="line.231"></a>
+<span class="sourceLineNo">232</span>    try (Table table = createTableAndWriteDataWithLabels(tableName,<a name="line.232"></a>
+<span class="sourceLineNo">233</span>        "(" + SECRET + "|" + CONFIDENTIAL + ")", PRIVATE)) {<a name="line.233"></a>
+<span class="sourceLineNo">234</span>      List&lt;RegionServerThread&gt; regionServerThreads = TEST_UTIL.getHBaseCluster()<a name="line.234"></a>
+<span class="sourceLineNo">235</span>          .getRegionServerThreads();<a name="line.235"></a>
+<span class="sourceLineNo">236</span>      for (RegionServerThread rsThread : regionServerThreads) {<a name="line.236"></a>
+<span class="sourceLineNo">237</span>        rsThread.getRegionServer().abort("Aborting ");<a name="line.237"></a>
+<span class="sourceLineNo">238</span>      }<a name="line.238"></a>
+<span class="sourceLineNo">239</span>      // Start one new RS<a name="line.239"></a>
+<span class="sourceLineNo">240</span>      RegionServerThread rs = TEST_UTIL.getHBaseCluster().startRegionServer();<a name="line.240"></a>
+<span class="sourceLineNo">241</span>      waitForLabelsRegionAvailability(rs.getRegionServer());<a name="line.241"></a>
+<span class="sourceLineNo">242</span>      Scan s = new Scan();<a name="line.242"></a>
+<span class="sourceLineNo">243</span>      s.setAuthorizations(new Authorizations(SECRET));<a name="line.243"></a>
+<span class="sourceLineNo">244</span>      ResultScanner scanner = table.getScanner(s);<a name="line.244"></a>
+<span class="sourceLineNo">245</span>      Result[] next = scanner.next(3);<a name="line.245"></a>
+<span class="sourceLineNo">246</span>      assertTrue(next.length == 1);<a name="line.246"></a>
+<span class="sourceLineNo">247</span>    }<a name="line.247"></a>
+<span class="sourceLineNo">248</span>  }<a name="line.248"></a>
+<span class="sourceLineNo">249</span>}<a name="line.249"></a>