[
https://issues.apache.org/jira/browse/HDFS-17478?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Madhan Neethiraj updated HDFS-17478:
------------------------------------
Description:
An instance of AccessControlEnforcer is obtained from the registered
INodeAttributeProvider before every call made to authorizer. This can be
avoided by initializing the AccessControlEnforcer instance during construction
of FsPermissionChecker and using it in every subsequent call to the authorizer.
This will eliminate the unnecessary overhead in highly performance sensitive
authz code path.
CC: [~abhay], [~arp], [~swagle]
was:An instance of AccessControlEnforcer is obtained from the registered
INodeAttributeProvider before every call made to authorizer. This can be
avoided by initializing the AccessControlEnforcer instance during construction
of FsPermissionChecker and using it in every subsequent call to the authorizer.
This will eliminate the unnecessary overhead in highly performance sensitive
authz code path.
> FSPermissionChecker to avoid obtaining a new AccessControlEnforcer instance
> before each authz call
> --------------------------------------------------------------------------------------------------
>
> Key: HDFS-17478
> URL: https://issues.apache.org/jira/browse/HDFS-17478
> Project: Hadoop HDFS
> Issue Type: Improvement
> Components: namanode
> Reporter: Madhan Neethiraj
> Assignee: Madhan Neethiraj
> Priority: Major
> Attachments: HDFS-17478.patch
>
>
> An instance of AccessControlEnforcer is obtained from the registered
> INodeAttributeProvider before every call made to authorizer. This can be
> avoided by initializing the AccessControlEnforcer instance during
> construction of FsPermissionChecker and using it in every subsequent call to
> the authorizer. This will eliminate the unnecessary overhead in highly
> performance sensitive authz code path.
>
> CC: [~abhay], [~arp], [~swagle]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
