Trash and permissions don't mix
-------------------------------
Key: HADOOP-2514
URL: https://issues.apache.org/jira/browse/HADOOP-2514
Project: Hadoop
Issue Type: New Feature
Components: dfs
Affects Versions: 0.16.0
Reporter: Robert Chansler
Shell command "rm" is really "mv" to trash with the expectation that the server
will at some point really delete the contents of trash. With the advent of
permissions, a user can "mv" folders that the user cannot "rm". The present
trash feature as implemented would allow the user to suborn the server into
deleting a folder in violation of the permissions model.
A related issue is that if anybody can mv a folder to the trash anybody else
can mv that same folder from the trash. This may be contrary to the
expectations of the user.
What is a better model for trash?
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
