[jira] [Created] (HBASE-12745) Visibility Labels: Support user groups visibility labels.

["Jerry He (JIRA)" <ji...@apache.org>]

Jerry He created HBASE-12745:
--------------------------------

             Summary: Visibility Labels:  Support user groups visibility labels.
                 Key: HBASE-12745
                 URL: https://issues.apache.org/jira/browse/HBASE-12745
             Project: HBase
          Issue Type: Improvement
          Components: security
    Affects Versions: 0.99.2, 0.98.9, 1.0.0
            Reporter: Jerry He
            Assignee: Jerry He


The thinking is that we should support visibility labels to be associated with user groups.
We will then be able grant visibility labels to a group in addition to individual users, which provides convenience and usability.
We will use '@group' to denote a group name, as similarly done in AcccessController.
For example, 
{code}
set_auths '@group1', ['SECRET','PRIVATE']
{code}
{code}
get_auth '@group1'
{code}
A user belonging to 'group1' will have all the visibility labels granted to 'group1'

We'll also support super user groups as specified in hbase-site.xml.

The code update will mainly be on the server side VisibilityLabelService implementation.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)