[ 
https://issues.apache.org/jira/browse/HADOOP-14899?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Steve Loughran updated HADOOP-14899:
------------------------------------
    Attachment: HADOOP-14899-branch-2-005.patch

+1 for last patch; it is in trunk

Patch 005 reapplied to branch-2; some minor import conflict and more variables 
to be tagged final.

Tested the auth tests against azure ireland
{code}
Running org.apache.hadoop.fs.azure.TestNativeAzureFileSystemAuthorization
Tests run: 45, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 89.537 sec - 
in org.apache.hadoop.fs.azure.TestNativeAzureFileSystemAuthorization
Running org.apache.hadoop.fs.azure.TestNativeAzureFSAuthorizationCaching
Tests run: 46, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 90.89 sec - in 
org.apache.hadoop.fs.azure.TestNativeAzureFSAuthorizationCaching
Running org.apache.hadoop.fs.azure.TestNativeAzureFSAuthWithBlobSpecificKeys
Tests run: 45, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 90.574 sec - 
in org.apache.hadoop.fs.azure.TestNativeAzureFSAuthWithBlobSpecificKeys

Results :

Tests run: 136, Failures: 0, Errors: 0, Skipped: 0

[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 04:36 min (Wall Clock)
{code}

> Restrict Access to setPermission operation when authorization is enabled in 
> WASB
> --------------------------------------------------------------------------------
>
>                 Key: HADOOP-14899
>                 URL: https://issues.apache.org/jira/browse/HADOOP-14899
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: fs/azure
>    Affects Versions: 2.8.1
>            Reporter: Kannapiran Srinivasan
>            Assignee: Kannapiran Srinivasan
>              Labels: fs, secure, wasb
>         Attachments: HADOOP-14899-001.patch, HADOOP-14899-002.patch, 
> HADOOP-14899-003.patch, HADOOP-14899-004.patch, HADOOP-14899-005.patch, 
> HADOOP-14899-branch-2-005.patch
>
>
> In case of authorization enabled Wasb clusters, we need to restrict setting 
> permissions on files or folders to owner or list of privileged users.
> Currently in the WASB implementation even when authorization is enabled there 
> is no check happens while doing setPermission call. In this JIRA we would 
> like to add the check on the setPermission call in NativeAzureFileSystem 
> implementation so that only owner or the privileged list of users or daemon 
> users can change the permissions of files/folders



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to