You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Chris Nauroth (JIRA)" <ji...@apache.org> on 2013/04/11 17:29:16 UTC
[jira] [Commented] (HDFS-4685) Implementation of extended file acl
in hdfs
[ https://issues.apache.org/jira/browse/HDFS-4685?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13629011#comment-13629011 ]
Chris Nauroth commented on HDFS-4685:
-------------------------------------
Hello, Sachin. Nice to meet you.
Yes, I have been researching POSIX ACL support in HDFS. I'll post a design doc on this jira as soon as I'm ready to present the details.
At a high level, I'm going to propose that we implement extended attributes first, and then use xattrs as a building block for implementing POSIX ACLs. Other file systems have taken this approach. The biggest challenge I see is selecting a data structure design for storage of the xattrs that gives us a satisfactory space-time trade-off. I've found this document to be helpful for explaining the functionality of POSIX ACLs and providing some background on the implementation decisions other file systems have made:
http://users.suse.com/~agruen/acl/linux-acls/online/
You may also want to take a look at HDFS-4672, which proposes associating storage policies with files. This is another feature that could use xattrs as a building block in its implementation, so there is some discussion of xattrs on that jira.
Thanks for filing this jira!
> Implementation of extended file acl in hdfs
> -------------------------------------------
>
> Key: HDFS-4685
> URL: https://issues.apache.org/jira/browse/HDFS-4685
> Project: Hadoop HDFS
> Issue Type: Improvement
> Components: hdfs-client, namenode, security
> Affects Versions: 1.1.2
> Reporter: Sachin Jose
> Assignee: Chris Nauroth
> Priority: Minor
>
> Currenly hdfs doesn't support Extended file ACL. In unix extended ACL can be achieved using getfacl and setfacl utilities. Is there anybody working on this feature ?
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira