Mailing-List: contact user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hadoop.apache.org
Received-SPF: pass (nike.apache.org: domain of justin.woody@gmail.com
 designates 209.85.214.176 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <5023A53D.2020107@ccri.com>
References: <5023A53D.2020107@ccri.com>
Date: Thu, 9 Aug 2012 08:00:51 -0400
Message-ID: 
 <CABGo67WLXxkqEQg+739RgoS_k-UzNBAO0aELenTdhyknNwPyEw@mail.gmail.com>
Subject: Re: HDFS group permissions
From: Justin Woody <justin.woody@gmail.com>
To: user@hadoop.apache.org, john.armstrong@ccri.com
Content-Type: text/plain; charset=ISO-8859-1

John,

Hadoop group permissions follow the BSD model, which is outlined in
the documentation. I think your settings are correct on that
directory, but you may want to check the higher level directories as
well (/path, /path/to, etc).

Hope that helps.
Justin

On Thu, Aug 9, 2012 at 7:55 AM, John Armstrong <jrja@ccri.com> wrote:
> I'm having some trouble with permissions on HDFS.  I'm trying to create a
> file in a directory where the user belongs to a group that has write
> permissions, but it doesn't seem to be working.
>
> First, the directory:
>
> myuser$ hadoop fs -ls /path/to/parent/
> drwxrwxr-x   - hdfs myhdfsgroup          0 2012-08-09 07:34
> /path/to/parent/directory
>
> so mygroup has all permissions on /path/to/parent/directory.  Next I check:
>
> myuser$ groups
> myuser [...] myhdfsgroup
>
> so myuser is a member of myhdfsgroup.  I should be able to put a file into
> this directory, no?
>
> myuser$ hadoop fs -put testFile.txt /path/to/parent/directory/testfile.txt
> put: org.apache.hadoop.security.AccessControlException: Permission denied:
> user=myuser, access=WRITE, inode="directory":hdfs:myhdfsgroup:rwxrwxr-x
>
> I don't even see a mention of the group in this exception message.  Do group
> permissions just not work?  And if not, why are they included in the
> documentation?
>
> In case it matters, I'm using Hadoop 0.20.2 plus some patches.
>
> tia