hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wei-Chiu Chuang (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-8112) Enforce authorization policy to protect administration operations for EC zone and schemas
Date Sun, 26 Feb 2017 08:21:44 GMT

    [ https://issues.apache.org/jira/browse/HDFS-8112?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15884606#comment-15884606
] 

Wei-Chiu Chuang commented on HDFS-8112:
---------------------------------------

There are a few EC related APIs: setErasureCodingPolicy, unsetErasureCodingPolicy, getErasureCodingPolicy
and getErasureCodingPolicies. HDFS-7859 will add addErasureCodingPolicy.

Except for getErasureCodingPolicy and getErasureCodingPolicies, all EC APIs requires super
user permission. This is not right. Changing EC policies of a directory should be equivalent
to updating its xattr.

> Enforce authorization policy to protect administration operations for EC zone and schemas
> -----------------------------------------------------------------------------------------
>
>                 Key: HDFS-8112
>                 URL: https://issues.apache.org/jira/browse/HDFS-8112
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>          Components: erasure-coding
>    Affects Versions: 3.0.0-alpha1
>            Reporter: Kai Zheng
>            Assignee: Rakesh R
>            Priority: Blocker
>              Labels: hdfs-ec-3.0-must-do
>
> We should allow to enforce authorization policy to protect administration operations
for EC zone and schemas as such behaviors would impact too much for a system.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org


Mime
View raw message