Ryan Waters created HADOOP-14565:
------------------------------------
Summary: Azure: Add Authorization support to ADLS
Key: HADOOP-14565
URL: https://issues.apache.org/jira/browse/HADOOP-14565
Project: Hadoop Common
Issue Type: Improvement
Components: fs/azure
Affects Versions: 2.8.0
Reporter: Ryan Waters
Assignee: Sivaguru Sankaridurg
Fix For: 2.9.0, 3.0.0-alpha4
As highlighted in HADOOP-13863, current implementation of WASB does not support
authorization to any File System operations. This jira is created to add
authorization support for WASB. The current approach is to enforce
authorization via an external REST service (One approach could be to use
component like Ranger to enforce authorization). The support for authorization
would be hiding behind a configuration flag : "fs.azure.enable.authorization"
and the remote service is expected to be provided via config :
"fs.azure.remote.auth.service.url".
The remote service is expected to provide support for the following REST call:
{URL}/CHECK_AUTHORIZATION```
An example request:
{URL}/CHECK_AUTHORIZATION?wasb_absolute_path=<absolute_path>&operation_type=<operation
type>&delegation_token=<delegation token>
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org
