[ https://issues.apache.org/jira/browse/HDFS-10455?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15620437#comment-15620437 ]
Hudson commented on HDFS-10455: ------------------------------- SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #10729 (See [https://builds.apache.org/job/Hadoop-trunk-Commit/10729/]) HDFS-10455. Logging the username when deny the setOwner operation. (brahma: rev e9c7a97089dd1234a7f1782f79b1b0b190b98f39) * (edit) hadoop-hdfs-project/hadoop-hdfs/src/test/java/org/apache/hadoop/security/TestPermission.java * (edit) hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/namenode/FSDirAttrOp.java > Logging the username when deny the setOwner operation > ----------------------------------------------------- > > Key: HDFS-10455 > URL: https://issues.apache.org/jira/browse/HDFS-10455 > Project: Hadoop HDFS > Issue Type: Bug > Components: namenode > Affects Versions: 2.7.2 > Reporter: Tianyin Xu > Assignee: Rakesh R > Priority: Minor > Attachments: HDFS-10455-003.patch, HDFS-10455.000.patch, > HDFS-10455.002.patch > > > The attached patch appends the user name in the logging when the setOwner > operation is denied due to insufficient permissions on this user (based on > his/her name). > The same practice is used in {{FSPermissionChecker}} such as {{checkOwner()}} > and {{checkSuperuserPrivilege()}}. > {code:title=FSDirAttrOp.java|borderStyle=solid} > if (!pc.isSuperUser()) { > if (username != null && !pc.getUser().equals(username)) { > - throw new AccessControlException("Non-super user cannot change > owner"); > + throw new AccessControlException("User " + pc.getUser() > + + " is not a super user (non-super user cannot change > owner)."); > } > if (group != null && !pc.containsGroup(group)) { > - throw new AccessControlException("User does not belong to " + > group); > + throw new AccessControlException("User " + pc.getUser() > + + " does not belong to " + group); > } > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org