[ 
https://issues.apache.org/jira/browse/HADOOP-2543?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12556801#action_12556801
 ] 

Sanjay Radia commented on HADOOP-2543:
--------------------------------------

Proposal:
  When no-permission-checking mode is set:
    a)  No checking of permissions when files are created, accessed or deleted.
               - this allows for backward compatibility when there were no 
permissions
    b)  The newly added operations, setOwner and setPermission (lets you do the 
equivalent of chmod, chown and chgroup operations)
     will check that the the user who is changing these properties is indeed 
the owner (or is super user); the system will preserve the permissions and 
ownership that
     are set
             - these are new operations and so there is no compatibility issue.
            -  allows the admin as a super user to change the owner and 
permissions to the actual owner user  and not worry about some one unauthorized
                   re-changing the ownership.  The same applies to any 
ownership and mode set at upgrade time.

   c) Newly created files and directories will be owned by the user that 
creates those files.
        - this has the advantage that files created on project directories (i.e 
outside of the home directories) will have the creator's user name recorded and 
hence this 
          will assist the admin to determine ownership of shared project files 
during the transition phase.
   d) stat (and ls -l) will show the actual recorded owner and permission of 
the file (even though all permission checks are ignored)
          

  In addition, the admin can turn-on  permission-checking and later turn-off 
permission checking again if problems are observed.
      Again ownership and permissions set   during the time mode was turned on 
are preserved.

           



> No-permission-checking mode for smooth transition to 0.16's permissions 
> features. 
> ----------------------------------------------------------------------------------
>
>                 Key: HADOOP-2543
>                 URL: https://issues.apache.org/jira/browse/HADOOP-2543
>             Project: Hadoop
>          Issue Type: New Feature
>          Components: dfs
>    Affects Versions: 0.15.1
>            Reporter: Sanjay Radia
>             Fix For: 0.16.0
>
>
> In moving to 0.16,  which will support permissions, a mode of no-permission 
> checking has been proposed to allow smooth transition to using the new 
> permissions feature.
> The idea is that at first 0.16 will be used for a period of time with 
> permission checking off. 
> Later after the admin has changed ownership and permissions of various files, 
> the permission checking can be turned off.
> This Jira defines what the semantics are of the no-permission-checking mode.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to