[
https://issues.apache.org/jira/browse/HADOOP-19940?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated HADOOP-19940:
------------------------------------
Labels: pull-request-available (was: )
> ABFS: Set permissions should be no-op for RBAC
> ----------------------------------------------
>
> Key: HADOOP-19940
> URL: https://issues.apache.org/jira/browse/HADOOP-19940
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: fs/azure
> Affects Versions: 3.5.0
> Reporter: Anmol Asrani
> Assignee: Anmol Asrani
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.5.1
>
>
> *Proposal from ABFS driver side: -*
> Introduce an optional ABFS configuration, for example:
> *fs.azure.rbac.only=true*
> When this configuration is enabled for {*}HNS-enabled accounts{*}, ABFS will
> check the flag in AzureBlobFileSystem#setPermission() before invoking the
> backend ACL update operation. If the account is HNS-enabled and
> fs.azure.rbac.only=true, setPermission() will be treated as a no-op and the
> driver will return success without issuing a SetAccessControl request to ADLS
> Gen2.
> This enables customers who have chosen an *RBAC-only authorization model* to
> run Spark and Hadoop workloads without requiring ACL-management permissions,
> while still retaining RBAC-based access to data operations.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
