[jira] [Commented] (HDDS-9631) Support object acl operation in S3 gateway

["Wei-Chiu Chuang (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HDDS-9631?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17952270#comment-17952270 ] 

Wei-Chiu Chuang commented on HDDS-9631:
---------------------------------------

https://chatgpt.com/share/68277585-4f1c-800e-8975-4a1791649ff0

there are some nuances between Ozone native ACL and S3 ACL. I think the biggest difference is lack of equivalance of group ACL in S3.

Probably the difference between Ozone native ACL and Ranger ACL is Ranger ACL does not support key prefix as a ACL type; it also does not support WRITE_ACL / READ_ACL permission.


> Support object acl operation in S3 gateway
> ------------------------------------------
>
>                 Key: HDDS-9631
>                 URL: https://issues.apache.org/jira/browse/HDDS-9631
>             Project: Apache Ozone
>          Issue Type: New Feature
>          Components: S3
>            Reporter: Ivan Andika
>            Priority: Major
>
> Currently, only S3 Bucket ACL is supported. We need to support S3 Object ACL based on the AWS specification.
> This requires a mapping between S3 Object ACL to Ozone Native ACL (Might also require to adhere to the Ranger permission model).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org