Apache/hbase
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

HBASE-12003 Fix SecureBulkLoadEndpoint class javadoc formatting

Browse Source
This commit is contained in:
Nick Dimiduk 2014-09-17 10:59:15 -04:00
parent 82bb370703
commit 8ed4ee2225
1 changed files with 15 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/SecureBulkLoadEndpoint.java
View File

@ -73,22 +73,23 @@ import java.util.List;
* security in HBase. * security in HBase.
* *
* This service addresses two issues: * This service addresses two issues:
* * <ol>
* 1. Moving files in a secure filesystem wherein the HBase Client * <li>Moving files in a secure filesystem wherein the HBase Client
* and HBase Server are different filesystem users. * and HBase Server are different filesystem users.</li>
* 2. Does moving in a secure manner. Assuming that the filesystem * <li>Does moving in a secure manner. Assuming that the filesystem
* is POSIX compliant. * is POSIX compliant.</li>
* </ol>
* *
* The algorithm is as follows: * The algorithm is as follows:
* * <ol>
* 1. Create an hbase owned staging directory which is * <li>Create an hbase owned staging directory which is
* world traversable (711): /hbase/staging * world traversable (711): {@code /hbase/staging}</li>
* 2. A user writes out data to his secure output directory: /user/foo/data * <li>A user writes out data to his secure output directory: {@code /user/foo/data}</li>
* 3. A call is made to hbase to create a secret staging directory * <li>A call is made to hbase to create a secret staging directory
* which globally rwx (777): /user/staging/averylongandrandomdirectoryname * which globally rwx (777): {@code /user/staging/averylongandrandomdirectoryname}</li>
* 4. The user moves the data into the random staging directory, * <li>The user moves the data into the random staging directory,
* then calls bulkLoadHFiles() * then calls bulkLoadHFiles()</li>
* * </ol>
* Like delegation tokens the strength of the security lies in the length * Like delegation tokens the strength of the security lies in the length
* and randomness of the secret directory. * and randomness of the secret directory.
* *