Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 12 Oct 2017 20:48:00 +0000 (UTC)
From: "Steve Loughran (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Message-ID: <JIRA.13107466.1507284839000.44610.1507841280639@Atlassian.JIRA>
In-Reply-To: <JIRA.13107466.1507284839000@Atlassian.JIRA>
References: <JIRA.13107466.1507284839000@Atlassian.JIRA> <JIRA.13107466.1507284839132@jira-lw-us.apache.org>
Subject: [jira] [Commented] (HADOOP-14935) Azure: POSIX permissions are
 taking effect in access() method even when authorization is enabled
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Thu, 12 Oct 2017 20:48:05 -0000


    [ https://issues.apache.org/jira/browse/HADOOP-14935?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16202599#comment-16202599 ] 

Steve Loughran commented on HADOOP-14935:
-----------------------------------------

OK. So access() is how code should check for permission; and the change whith HADOOP-14845 is something which you'll turn off for Hive, but which may be used elsewhere. By making it optional you reduce RPC calls and so increase performance? Is that the reason? That I can understand.

Like I said, I'll go with Thomas's opinions here: I'm happy, though I'd add some more detail to the javadoc of the option to explain it, which is something I Can do during the commit


> Azure: POSIX permissions are taking effect in access() method even when authorization is enabled
> ------------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-14935
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14935
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: fs/azure
>    Affects Versions: 2.9.0
>            Reporter: Santhosh G Nayak
>            Assignee: Santhosh G Nayak
>         Attachments: HADOOP-14935-003.patch, HADOOP-14935-004.patch, HADOOP-14935.1.patch, HADOOP-14935.2.patch
>
>
> FileSystem implementation class for azure i.e. {{NativeAzureFileSystem}} does not override {{access(path,mode)}} method and uses the default implementation from the base class. This base implementaion uses the POSIX permissions to check if the requested user has access to given path or not even when authorization is enabled, which is incorrect.
> {{NativeAzureFileSystem.access()}} in authorization enabled mode should use the authorization mechanism provided instead of relying on the POSIX permission ons. So the proposal is to override {{FileSystem.access()}} method in {{NativeAzureFileSystem}} such that it honors the authorization mechanism configured in authorization enabled mode and falls back to POSIX permissions otherwise.


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org