[
https://issues.apache.org/jira/browse/HDFS-7568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14334235#comment-14334235
]
Colin Patrick McCabe commented on HDFS-7568:
--------------------------------------------
Thanks for looking at this, [~eddyxu].
bq. System time on ANN and SNN can not be mutable and out-of-sync. It requires
that ANN and SNN have a synchronized time service, which can not be changed by
any party. ANN and SNN should also check the time between them. If one is out
of sync, ANN should alarm users and reject further requests.
I don't understand why this would be a requirement. It is the active NameNode
that is choosing to create or not create a file, not the standby. The standby
just follows the decision which the active NameNode already took. And if there
is a failover, the standby will replay all edits before becoming active.
bq. Once a directory is set to WORM mode, neither the system administer or the
user is allowed to turn WORM mode off. Only special personnels have the rights
to delete such directory.
Who are "special personnel" are and how they are different than system
administrators? A few times you refer to "super users," but we already have
superusers in hdfs and they are system administrators.
> Support immutability (Write-once-read-many) in HDFS
> ---------------------------------------------------
>
> Key: HDFS-7568
> URL: https://issues.apache.org/jira/browse/HDFS-7568
> Project: Hadoop HDFS
> Issue Type: New Feature
> Components: namenode
> Affects Versions: 2.7.0
> Reporter: Suresh Srinivas
> Assignee: Suresh Srinivas
>
> Many regulatory compliance requires storage to support WORM functionality to
> protect sensitive data from being modified or deleted. This jira proposes
> adding that feature to HDFS.
> See the following comment for more description.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
