[
https://issues.apache.org/jira/browse/HBASE-5526?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jesse Yates updated HBASE-5526:
-------------------------------
Description:
Currently many all the files created by the HBase user are just written using
the default file permissions granted by hdfs. However, to ensure only the
correct user/group views the files and directories, we need to be able to apply
a configurable umask to either directories or files.
This ticket covers setting permissions for files written to dfs, as opposed to
things like pid and log files.
The impetus for this was to allow the web-user to view the directory structure
of hbase, but not to actually see any of the actual data hbase is storing.
was:
Currently many all the files created by the HBase user are just written using
the default file permissions granted by hdfs. However, it is often times
adventageous to only allow a subset of the world to view the actual data
written by hbase when scanning the raw hdfs files.
This ticket covers setting permissions for files written to hdfs that are
storing actual user data, as opposed to _all_ files written to hdfs as many of
them contain non-identifiable metadata.
Summary: Configurable file and directory based umask (was: Optional
file permission settings)
> Configurable file and directory based umask
> -------------------------------------------
>
> Key: HBASE-5526
> URL: https://issues.apache.org/jira/browse/HBASE-5526
> Project: HBase
> Issue Type: New Feature
> Components: regionserver
> Reporter: Jesse Yates
> Assignee: Jesse Yates
> Fix For: 0.94.0
>
> Attachments: java_HBASE-5526-v2.patch, java_HBASE-5526.patch
>
>
> Currently many all the files created by the HBase user are just written using
> the default file permissions granted by hdfs. However, to ensure only the
> correct user/group views the files and directories, we need to be able to
> apply a configurable umask to either directories or files.
> This ticket covers setting permissions for files written to dfs, as opposed
> to things like pid and log files.
> The impetus for this was to allow the web-user to view the directory
> structure of hbase, but not to actually see any of the actual data hbase is
> storing.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
