HBase fine grained access control with extended permissions and inheritable roles

HBase is a widely used distributed and column-oriented database based on HADOOP and HDFS. But it still has some shortcomings in storing and sharing data. In order to upgrade the security level of HBase, this paper proposes a fine-grained access control framework which extends the access control permissions according to the atomic operations of HBase. Meanwhile, we use XACML for permissions implementation which provides RBAC and Role-Inheritance and guarantees permissions management more conveniently. From the experiment, it shows that the fine grained access control for HBase is practical and the increased overload can almost be ignored while executing the permissions matching.