Mailing-List: contact hdfs-dev-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: hdfs-dev@hadoop.apache.org
Date: Wed, 26 Nov 2014 09:30:13 +0000 (UTC)
From: "J.Andreina (JIRA)" <jira@apache.org>
To: hdfs-dev@hadoop.apache.org
Message-ID: <JIRA.12757928.1416994189000.24967.1416994213137@Atlassian.JIRA>
In-Reply-To: <JIRA.12757928.1416994189000@Atlassian.JIRA>
References: <JIRA.12757928.1416994189000@Atlassian.JIRA>
 <JIRA.12757928.1416994189784@arcas>
Subject: [jira] [Created] (HDFS-7447) Number of maximum Acl entries on a
 File/Folder should be made user configurable than hardcoding .
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

J.Andreina created HDFS-7447:
--------------------------------

             Summary: Number of maximum Acl entries on a File/Folder should be made user configurable than hardcoding .
                 Key: HDFS-7447
                 URL: https://issues.apache.org/jira/browse/HDFS-7447
             Project: Hadoop HDFS
          Issue Type: Improvement
          Components: security
            Reporter: J.Andreina


By default on creating a folder1 will have 6 acl entries . On top of that assigning acl  on a folder1 exceeds 32 , then unable to assign acls for a group/user to folder1. 
{noformat}
2014-11-20 18:55:06,553 ERROR [qtp1279235236-17 - /rolexml/role/modrole] Error occured while setting permissions for Resource:[ hdfs://hacluster/folder1 ] and Error message is : Invalid ACL: ACL has 33 entries, which exceeds maximum of 32.
        at org.apache.hadoop.hdfs.server.namenode.AclTransformation.buildAndValidateAcl(AclTransformation.java:274)
        at org.apache.hadoop.hdfs.server.namenode.AclTransformation.mergeAclEntries(AclTransformation.java:181)
        at org.apache.hadoop.hdfs.server.namenode.FSDirectory.unprotectedModifyAclEntries(FSDirectory.java:2771)
        at org.apache.hadoop.hdfs.server.namenode.FSDirectory.modifyAclEntries(FSDirectory.java:2757)
        at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.modifyAclEntries(FSNamesystem.java:7734)
{noformat}

Here value 32 is hardcoded  , which can be made user configurable. 

{noformat}
private static List buildAndValidateAcl(ArrayList aclBuilder)
        throws AclException
    {
        if(aclBuilder.size() > 32)
            throw new AclException((new StringBuilder()).append("Invalid ACL: ACL has ").append(aclBuilder.size()).append(" entries, which exceeds maximum of ").append(32).append(".").toString());
:
:
}
{noformat}


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)