Examples of org.apache.hadoop.hbase.security.access.AccessControllerProtocol.revoke()

org.apache.hadoop.hbase.security.access.AccessControllerProtocol.revoke()

Revokes a previously granted privilege from a user or group. Note that the provided {@link TablePermission} details must exactly matcha stored grant. For example, if user "bob" has been granted "READ" access to table "data", over column family and qualifer "info:colA", then the table, column family and column qualifier must all be specified. Attempting to revoke permissions over just the "data" table will have no effect. @param user the user name, or, if prefixed with "@", group name whoseprivileges are being revoked @param permission the details of the previously granted permission to revoke @throws IOException if the revocation could not be performed

    // revoke family level permission won't impact column level.
    acl = new HTable(conf, AccessControlLists.ACL_TABLE_NAME);
    try {
      AccessControllerProtocol protocol = acl.coprocessorProxy(AccessControllerProtocol.class,
        tableName);
      protocol.revoke(new UserPermission(Bytes.toBytes(user.getShortName()), tableName, family1,
        qualifier));
    } finally {
      acl.close();
    }


    acl = new HTable(conf, AccessControlLists.ACL_TABLE_NAME);
    try {
      AccessControllerProtocol protocol = acl.coprocessorProxy(AccessControllerProtocol.class,
        tableName);
      protocol.revoke(upToSet);
      perms = protocol.getUserPermissions(tableName);
    } finally {
      acl.close();
    }

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.