[ https://issues.apache.org/jira/browse/HBASE-18659?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Yi Mei updated HBASE-18659: --------------------------- Attachment: HBASE-18659.master.001.patch > Use HDFS ACL to give user the ability to read snapshot directly on HDFS > ----------------------------------------------------------------------- > > Key: HBASE-18659 > URL: https://issues.apache.org/jira/browse/HBASE-18659 > Project: HBase > Issue Type: New Feature > Reporter: Duo Zhang > Assignee: Yi Mei > Priority: Major > Attachments: HBASE-18659.master.001.patch > > > On the dev meetup notes in Shenzhen after HBaseCon Asia, there is a topic > about the permission to read hfiles on HDFS directly. > {quote} > For client-side scanner going against hfiles directly; is there a means of > being able to pass the permissions from hbase to hdfs? > {quote} > And at Xiaomi we also face the same problem. {{SnapshotScanner}} is much > faster and consumes less resources, but only super use has the ability to > read hfile directly on HDFS. > So here we want to use HDFS ACL to address this problem. > https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#ACLs_File_System_API > The basic idea is to set acl and default acl on the ns/table/cf directory on > HDFS for the users who have the permission to read the table on HBase. > Suggestions are welcomed. -- This message was sent by Atlassian JIRA (v7.6.3#76005)