[GitHub] flink issue #3335: [FLINK-5818][Security]change checkpoint dir permission to...

[StephanEwen <gi...@git.apache.org>]

Github user StephanEwen commented on the issue:

    https://github.com/apache/flink/pull/3335
  
    Thank you for the contribution. I see the idea behind the fix.
    
    I am unsure whether we should let Flink manage the permissions of these directories. My gut feeling is that this is something that the operational setup should be taking care of. For example some setup may want to keep whatever is the pre-defined permission, to make checkpoints accessible by other groups for the purpose of cloning/migrating jobs to other clusters.
    
    That is something probably worth of a mailing list discussion.
    I would put this on hold until we have a decision there.
    
    If we want this change, we still need to do it a bit different, as we are trying to make Flink work without any dependencies to Hadoop (Hadoop is still supported perfectly, but is an optional dependencies).
    Adding new hard Hadoop dependencies (like here) is not possible due to that.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastructure@apache.org or file a JIRA ticket
with INFRA.
---