[
https://issues.apache.org/jira/browse/HDFS-16164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17397670#comment-17397670
]
Leon Gao commented on HDFS-16164:
---------------------------------
[~kihwal] thanks for the response,
we thought about using acl but it would require to have default acl and acl on
all the files across the cluster, which is quite operational heavy and hard to
monitor/manage.. So we think it would be easier to have a global rule on
namenode to allow read, like superuser but read-only.
> Configuration to allow group with read-all privilege
> ----------------------------------------------------
>
> Key: HDFS-16164
> URL: https://issues.apache.org/jira/browse/HDFS-16164
> Project: Hadoop HDFS
> Issue Type: Improvement
> Reporter: Leon Gao
> Assignee: Leon Gao
> Priority: Major
>
> We see more use cases that need read-all permission to hdfs. One example is
> data quality service that needs to read all the data but no need to write.
> Currently seems hdfs only supports supergroup that can do anything.
> Maybe we can add configuration like dfs.permissions.read-all.group to manage
> this type of permissions easily.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
