[ https://issues.apache.org/jira/browse/HADOOP-2543?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12556801#action_12556801 ]
Sanjay Radia commented on HADOOP-2543: -------------------------------------- Proposal: When no-permission-checking mode is set: a) No checking of permissions when files are created, accessed or deleted. - this allows for backward compatibility when there were no permissions b) The newly added operations, setOwner and setPermission (lets you do the equivalent of chmod, chown and chgroup operations) will check that the the user who is changing these properties is indeed the owner (or is super user); the system will preserve the permissions and ownership that are set - these are new operations and so there is no compatibility issue. - allows the admin as a super user to change the owner and permissions to the actual owner user and not worry about some one unauthorized re-changing the ownership. The same applies to any ownership and mode set at upgrade time. c) Newly created files and directories will be owned by the user that creates those files. - this has the advantage that files created on project directories (i.e outside of the home directories) will have the creator's user name recorded and hence this will assist the admin to determine ownership of shared project files during the transition phase. d) stat (and ls -l) will show the actual recorded owner and permission of the file (even though all permission checks are ignored) In addition, the admin can turn-on permission-checking and later turn-off permission checking again if problems are observed. Again ownership and permissions set during the time mode was turned on are preserved. > No-permission-checking mode for smooth transition to 0.16's permissions > features. > ---------------------------------------------------------------------------------- > > Key: HADOOP-2543 > URL: https://issues.apache.org/jira/browse/HADOOP-2543 > Project: Hadoop > Issue Type: New Feature > Components: dfs > Affects Versions: 0.15.1 > Reporter: Sanjay Radia > Fix For: 0.16.0 > > > In moving to 0.16, which will support permissions, a mode of no-permission > checking has been proposed to allow smooth transition to using the new > permissions feature. > The idea is that at first 0.16 will be used for a period of time with > permission checking off. > Later after the admin has changed ownership and permissions of various files, > the permission checking can be turned off. > This Jira defines what the semantics are of the no-permission-checking mode. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.