[ 
https://issues.apache.org/jira/browse/HDFS-14743?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17029329#comment-17029329
 ] 

Arpit Agarwal commented on HDFS-14743:
--------------------------------------

Thanks for sharing the PoC [~weichiu] . I understand why you chose 
thread-locals to store the operation info, it avoids significant refactoring of 
the code.

I don't have a strong opinion on which is better, thread-locals vs passing 
parameters all the way through. [~xyao] [~aengineer] do you have an opinion?

> Enhance INodeAttributeProvider/ AccessControlEnforcer Interface in HDFS to 
> support Authorization of mkdir, rm, rmdir, copy, move etc...
> ---------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: HDFS-14743
>                 URL: https://issues.apache.org/jira/browse/HDFS-14743
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: hdfs
>    Affects Versions: 3.1.0
>            Reporter: Ramesh Mani
>            Assignee: Wei-Chiu Chuang
>            Priority: Critical
>         Attachments: HDFS-14743 Enhance INodeAttributeProvider_ 
> AccessControlEnforcer Interface.pdf
>
>
> Enhance INodeAttributeProvider / AccessControlEnforcer Interface in HDFS to 
> support Authorization of mkdir, rm, rmdir, copy, move etc..., this should 
> help the implementors of the interface like Apache Ranger's HDFS 
> Authorization plugin to authorize and audit those command sets.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to