You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-dev@hadoop.apache.org by "Istvan Fajth (JIRA)" <ji...@apache.org> on 2019/05/28 19:02:00 UTC

[jira] [Created] (HDFS-14517) Display bug in permissions when ACL mask is defined

Istvan Fajth created HDFS-14517:
-----------------------------------

             Summary: Display bug in permissions when ACL mask is defined
                 Key: HDFS-14517
                 URL: https://issues.apache.org/jira/browse/HDFS-14517
             Project: Hadoop HDFS
          Issue Type: Bug
          Components: namenode
         Environment: Tested on latest CDH integration, and CDH5 as well with the same result.
            Reporter: Istvan Fajth


When ACLs are enabled on a folder, the following sequence of commands provide the following result:

 

{{$ hdfs dfs -mkdir /tmp/acl
$ hdfs dfs -ls /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxr-xr-x   - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
$ hdfs dfs -getfacl /tmp/acl
# file: /tmp/acl
# owner: hdfs
# group: supergroup
user::rwx
group::r-x
other::r-x

$ hdfs dfs -setfacl -m mask::rwx /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxrwxr-x+  - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
drwx-wx-wx   - hive   supergroup          0 2019-05-27 23:48 /tmp/hive
drwxrwxrwt   - mapred hadoop              0 2019-05-28 01:32 /tmp/logs
$ hdfs dfs -setfacl -m mask::r-- /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxr--r-x+  - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
$ hdfs dfs -setfacl -m mask::r-x /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxr-xr-x+  - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
$ hdfs dfs -getfacl /tmp/acl
# file: /tmp/acl
# owner: hdfs
# group: supergroup
user::rwx
group::r-x
mask::r-x
other::r-x}}

 

So the group permission representation is changing with the defined mask ACL instead of the group ACL or, maybe even better, the effective group ACL.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org