Mailing-List: contact common-user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-user@hadoop.apache.org
Received-SPF: pass (athena.apache.org: domain of starrysl@gmail.com designates
 209.85.223.193 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:from:date:message-id:subject:to:content-type;
        b=fTWa5OQ3PrUzpyM6tsWG8J6MyQqe9E/jv0NpYRmmzjy4iYapVGiTsiQgUttdM23pne
         WtpBRhXrY2VsUJDvrVzLKKVwFY4Dqh+uUJy6VEddnOYETuHRH/LFQpmAkhN+e9KJOpdp
         wKGrIY5kl9smwg2duzm/ajSjuDZLq8gmD42Zg=
MIME-Version: 1.0
From: Starry SHI <starrysl@gmail.com>
Date: Thu, 17 Dec 2009 20:22:42 +0800
Message-ID: <a5accba30912170422i2343de0es90a15f323b334a06@mail.gmail.com>
Subject: permission control in HDFS
To: common-user@hadoop.apache.org, common-dev@hadoop.apache.org
Content-Type: multipart/alternative; boundary=0050450169f3346034047aebaf07

--0050450169f3346034047aebaf07
Content-Type: text/plain; charset=UTF-8

Hi.

I wonder how permission control can be used in HDFS?

I am using hadoop 0.20.1, and I have 3 user accessing to HDFS. I use user1's
account to create a file and chmod 600 to this file in HDFS. However, I
tried to use user2 and user3's account to access the file belonging to
user1, they can still read  the contents of the file!!! This means the
permission control is no use in HDFS.

What I tried to do is to avoid user2 and user3 to read the file from user1
stored in HDFS. In the configuration I have already set dfs.permissions as
"true". Can somebody tell me how to enable permission control in HDFS?

Best regards,
Starry

/* Tomorrow is another day. So is today. */

--0050450169f3346034047aebaf07--