[ https://issues.apache.org/jira/browse/HADOOP-14935?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16556753#comment-16556753 ]
Sean Mackrory commented on HADOOP-14935: ---------------------------------------- I think the committed patch accidentally changed getFileStatusInternal to private, which gets flagged in API compatibility tests (which we should probably add to Yetus - I know we had the same automated tests running for Hadoop 3). See HADOOP-15632 where I intend to change it back. > Azure: POSIX permissions are taking effect in access() method even when > authorization is enabled > ------------------------------------------------------------------------------------------------ > > Key: HADOOP-14935 > URL: https://issues.apache.org/jira/browse/HADOOP-14935 > Project: Hadoop Common > Issue Type: Sub-task > Components: fs/azure > Affects Versions: 2.9.0 > Reporter: Santhosh G Nayak > Assignee: Santhosh G Nayak > Priority: Major > Fix For: 2.9.0, 3.1.0 > > Attachments: HADOOP-14935-003.patch, HADOOP-14935-004.patch, > HADOOP-14935-005.patch, HADOOP-14935.1.patch, HADOOP-14935.2.patch > > > FileSystem implementation class for azure i.e. {{NativeAzureFileSystem}} does > not override {{access(path,mode)}} method and uses the default implementation > from the base class. This base implementaion uses the POSIX permissions to > check if the requested user has access to given path or not even when > authorization is enabled, which is incorrect. > {{NativeAzureFileSystem.access()}} in authorization enabled mode should use > the authorization mechanism provided instead of relying on the POSIX > permission ons. So the proposal is to override {{FileSystem.access()}} method > in {{NativeAzureFileSystem}} such that it honors the authorization mechanism > configured in authorization enabled mode and falls back to POSIX permissions > otherwise. -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org