Description
Right now we have some inconsistency wrt sending back tags on read. We do this in scan when using Java client(Codec based cell block encoding). But during a Get operation or when a pure PB based Scan comes we are not sending back the tags. So any of the below fix we have to do
1. Send back tags in missing cases also. But sending back visibility expression/ cell ACL is not correct.
2. Don't send back tags in any case. This will a problem when a tool like ExportTool use the scan to export the table data. We will miss exporting the cell visibility/ACL.
3. Send back tags based on some condition. It has to be per scan basis. Simplest way is pass some kind of attribute in Scan which says whether to send back tags or not. But believing some thing what scan specifies might not be correct IMO. Then comes the way of checking the user who is doing the scan. When a HBase super user doing the scan then only send back tags. So when a case comes like Export Tool's the execution should happen from a super user.
So IMO we should go with #3.
Patch coming soon.
Attachments
Attachments
Issue Links
- incorporates
-
HBASE-10398 HBase book updates for Replication after HBASE-10322
- Closed
- relates to
-
HBASE-10326 Super user should be able scan all the cells irrespective of the visibility labels
- Closed
-
HBASE-12470 Way to determine which labels are applied to a cell in a table
- Closed
-
HBASE-12441 Export and CopyTable need to be able to keep tags/labels in cells
- Closed