[jira] [Created] (HBASE-10860) Insufficient AccessController covering permission check

["Anoop Sam John (JIRA)" <ji...@apache.org>]

Anoop Sam John created HBASE-10860:
--------------------------------------

             Summary: Insufficient AccessController covering permission check
                 Key: HBASE-10860
                 URL: https://issues.apache.org/jira/browse/HBASE-10860
             Project: HBase
          Issue Type: Bug
          Components: security
    Affects Versions: 0.98.0
            Reporter: Anoop Sam John
            Assignee: Anoop Sam John
            Priority: Critical
             Fix For: 0.99.0, 0.98.2


{code}
  List<Cell> list = (List<Cell>)entry.getValue();
  if (list == null || list.isEmpty()) {
	get.addFamily(col);
  } else {
	for (Cell cell : list) {
	  get.addColumn(col, CellUtil.cloneQualifier(cell));
	}
  }
{code}
When a delete family Mutation comes, a Cell will be added into the list with Qualifier as null. (See Delete#deleteFamily(byte[])). So it will miss getting added against the check list == null || list.isEmpty().  We will fail getting the cells under this cf for covering permission check.




--
This message was sent by Atlassian JIRA
(v6.2#6252)