You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Siyao Meng (Jira)" <ji...@apache.org> on 2021/05/21 18:18:00 UTC

[jira] [Created] (HDDS-5262) Improve CLI volume/bucket/key removeacl response

Siyao Meng created HDDS-5262:
--------------------------------

             Summary: Improve CLI volume/bucket/key removeacl response
                 Key: HDDS-5262
                 URL: https://issues.apache.org/jira/browse/HDDS-5262
             Project: Apache Ozone
          Issue Type: Improvement
          Components: Ozone CLI
    Affects Versions: 1.2.0
            Reporter: Siyao Meng
            Assignee: Siyao Meng


Before this patch, volume removeacl (almost) always returns success message, regardless of whether an actual ACL entry is removed or not:

{code}
bash-4.2$ ozone sh volume getacl vol2
[ {
  "type" : "USER",
  "name" : "testuser/scm@EXAMPLE.COM",
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
}, {
  "type" : "GROUP",
  "name" : "root",
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
} ]
bash-4.2$ ozone sh volume removeacl -a=user:somenonexistentuser:a vol2
ACL user:somenonexistentuser:a[ACCESS] removed successfully.
bash-4.2$ ozone sh volume getacl vol2
[ {
  "type" : "USER",
  "name" : "testuser/scm@EXAMPLE.COM",
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
}, {
  "type" : "GROUP",
  "name" : "root",
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
} ]
{code}

This isn't particularly useful since owners/admins still have to use getacl to check if an ACL is indeed removed via CLI. It makes more sense to just print out the ACL status after the operation.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org