[ 
https://issues.apache.org/jira/browse/HADOOP-1298?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12524943
 ] 

eric baldeschwieler commented on HADOOP-1298:
---------------------------------------------

Past experience shows that it is much harder to take something away from a user 
community than to never give it to them.  It is impossible to predict all the 
programmatic interactions with the FS that may be implemented, so I'd suggest 
we do the easiest thing to support first, not the most general thing.

What if we store permissions only on directories and only check permissions on 
the containing directory?

This seems very easy to document and implement.  It would minimize the 
permission code that will run in the current critical sections in the namenode 
(where performance is a major concern for us) and would give us a lot of 
flexibility to distribute the namenodes responsibilities in the future.  It 
would also reduce the RAM used by permissions by not adding any state to the 
file objects...

> adding user info to file
> ------------------------
>
>                 Key: HADOOP-1298
>                 URL: https://issues.apache.org/jira/browse/HADOOP-1298
>             Project: Hadoop
>          Issue Type: New Feature
>          Components: dfs, fs
>            Reporter: Kurtis Heimerl
>            Assignee: Christophe Taton
>             Fix For: 0.15.0
>
>         Attachments: 1298_2007-08-30a.patch, hadoop-user-munncha.patch17
>
>
> I'm working on adding a permissions model to hadoop's DFS. The first step is 
> this change, which associates user info with files. Following this I'll 
> assoicate permissions info, then block methods based on that user info, then 
> authorization of the user info. 
> So, right now i've implemented adding user info to files. I'm looking for 
> feedback before I clean this up and make it offical. 
> I wasn't sure what release, i'm working off trunk. 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to