You are viewing a plain text version of this content. The canonical link for it is here.

Posted to hdfs-issues@hadoop.apache.org by "Yong Zhang (JIRA)" <ji...@apache.org> on 2015/05/06 10:56:01 UTC

[jira] [Commented] (HDFS-8112) Enforce authorization policy to protect administration operations for EC zone and schemas

    [ https://issues.apache.org/jira/browse/HDFS-8112?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14530170#comment-14530170 ] 

Yong Zhang commented on HDFS-8112:
----------------------------------

Hi [~rakeshr], are you still working on it?
I suggest that we can check if user has permission to createErasureCodingZone via checkPathAccess with FsAction.ALL, and getErasureCodingInfo and getErasureCodingZoneInfo via checkPathAccess with FsAction.READ.
all there 3 API are common operation in multiple tenant scenario.

> Enforce authorization policy to protect administration operations for EC zone and schemas
> -----------------------------------------------------------------------------------------
>
>                 Key: HDFS-8112
>                 URL: https://issues.apache.org/jira/browse/HDFS-8112
>             Project: Hadoop HDFS
>          Issue Type: Sub-task
>            Reporter: Kai Zheng
>            Assignee: Rakesh R
>
> We should allow to enforce authorization policy to protect administration operations for EC zone and schemas as such behaviors would impact too much for a system.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)