[
https://issues.apache.org/jira/browse/HADOOP-1782?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Christophe Taton updated HADOOP-1782:
-------------------------------------
Attachment: 1782_2007-08-24a.patch
The current patch contains a few {{java.security.Permission}} subclasses that
will be eventually used to integrate permissions info into INodes and to
achieve permission checking following the standard Java authorization scheme.
It also contains POSIX permissions primitives:
- {{fs.permission.WritablePermissionCollection}}: abstract serializable
permission collection.
- {{fs.permission.HFilePermission}}: non mutable representation of a permission
that some entity may request (to process permission checking).
- {{fs.permission.HFileAction}}: enumeration of the various actions available
on a DFS file; for now: create, delete, read, write and setPermissions
(assuming that setReplication is mapped to write).
- {{fs.permission.POSIXFileAction}}: enumeration of the regular POSIX actions
(read, write and execute); we'll probably not use the execute action and merge
it with the read action when considering access to a directory.
- {{fs.permission.POSIXFilePermission}}: non mutable representation of a POSIX
action/permission that some entity may request (to process POSIX permission
checking). It currently contains a POSIXFileAction and an ID representing the
entity requesting the action.
- {{fs.permission.POSIXFilePermissions}}: a mutable per-INode permission
collection that holds: an ID representing the owner of the INode and a short
bits set that stores the POSIX authorizations for owner, group members and
others entities. We currently ignore groups.
> DFS File Permissions framework
> ------------------------------
>
> Key: HADOOP-1782
> URL: https://issues.apache.org/jira/browse/HADOOP-1782
> Project: Hadoop
> Issue Type: Improvement
> Reporter: Christophe Taton
> Assignee: Christophe Taton
> Fix For: 0.15.0
>
> Attachments: 1782_2007-08-24a.patch
>
>
> In [HADOOP-1298|https://issues.apache.org/jira/browse/HADOOP-1298] we want to
> provide authorization to the DFS. This issue should provide the bases to add
> permissions information to INodes.
> In a short-term implementation, we'll focus on providing POSIX style
> permissions.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
