[GitHub] [accumulo] reggert opened a new issue #1370: InputConfigurator.validatePermissions checks for Table.READ but not Namespace.READ

[GitBox <gi...@apache.org>]

reggert opened a new issue #1370: InputConfigurator.validatePermissions checks for Table.READ but not Namespace.READ
URL: https://github.com/apache/accumulo/issues/1370
 
 
   When reading a table via the Accumulo Shell or via `Scanner`/`BatchScanner`, it is sufficient for the user to have **either** `Table.READ` **or** `Namespace.READ` permission for the table or its namespace. However, when reading a table via `AccumuloInputFormat` (in Hadoop or Spark), prior to launching the job, `InputConfiguration.validatePermissions` checks only whether the user has `Table.READ` permission, ignoring any `Namespace.READ` permission that the user may have. This means that even if a user can read a table via a non-Hadoop client, reading the same table in Hadoop/Spark fails with the error "Unable to access table".

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services