Mailing-List: contact zookeeper-user-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: zookeeper-user@hadoop.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; s=serpent; d=yahoo-inc.com; c=nofws; q=dns;
	h=message-id:date:from:user-agent:mime-version:to:subject:
	references:in-reply-to:content-type:content-transfer-encoding;
	b=n1cTZM1lv8I5Vnb/Wz1aUpoPqFAics1elFxF8pe+5aMwr6fWe2KXq2Qd0UB1CLB5
Message-ID: <4B82B0EA.6050804@yahoo-inc.com>
Date: Mon, 22 Feb 2010 08:29:30 -0800
From: Benjamin Reed <breed@yahoo-inc.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
 rv:1.9.1.7) Gecko/20100222 Thunderbird/3.0.1
MIME-Version: 1.0
To: "zookeeper-user@hadoop.apache.org" <zookeeper-user@hadoop.apache.org>
Subject: Re: Znode ACL watcher?
References: <b71985371002220800h46559d2an2f9e2ad2f510476c@mail.gmail.com>
In-Reply-To: <b71985371002220800h46559d2an2f9e2ad2f510476c@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

no, you cannot watch for ACL changes. it is one of the 
API/implementation simplifications we did since we didn't have a good 
use case for it.

it does seem a little bit weird. we are following file system semantics 
here. i guess for ultimate security only clients with admin permission 
would be able to see an ACL.

ben

On 02/22/2010 08:00 AM, Mark Masse wrote:
> Hi,
>
> Does anyone know if there's a way to get a Watcher notification when a
> znode's ACL changes?
>
> I also wanted to ask if it seems weird that you can "read" a znode's ACL
> even if you don't have permissions to read the data.
>
> Thanks,
>
>   --
> Mark Masse
> http://www.massedynamic.org
>