[jira] Commented: (HADOOP-1873) User permissions for Map/Reduce

["Tsz Wo (Nicholas), SZE (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-1873?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12533884 ] 

Tsz Wo (Nicholas), SZE commented on HADOOP-1873:
------------------------------------------------

For preventing file/directory name guessing, we could append large random numbers to file names.  Suppose we want to store foo.  We use the name foo2561346125341261461254 instead.  Then, jobtracker could first get the file name by "ls foo*" and then read the file.  Other users without directory lookup permission are not possible to guess the name.

> User permissions for Map/Reduce
> -------------------------------
>
>                 Key: HADOOP-1873
>                 URL: https://issues.apache.org/jira/browse/HADOOP-1873
>             Project: Hadoop
>          Issue Type: Improvement
>            Reporter: Raghu Angadi
>            Assignee: Raghu Angadi
>
> HADOOP-1298 and HADOOP-1701 add permissions and pluggable security for DFS files and DFS accesses. Same users permission should work for Map/Reduce jobs as well. 
> User persmission should propegate from client to map/reduce tasks and all the file operations should be subject to user permissions. This is transparent to the user (i.e. no changes to user code should be required). 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.