[
https://issues.apache.org/jira/browse/HDFS-5925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13897825#comment-13897825
]
Vinayakumar B commented on HDFS-5925:
-------------------------------------
Patch looks good Chris. +1
{code}- * flag is false, then the NameNode will reject all ACL-related
operations and
- * refuse to load an fsimage or edit log containing ACLs.{code}
Here I didnt find any check while loading ACLs from fsimage in current code
though. Am I missing something?
> ACL configuration flag must only reject ACL API calls, not ACLs present in
> fsimage or edits.
> --------------------------------------------------------------------------------------------
>
> Key: HDFS-5925
> URL: https://issues.apache.org/jira/browse/HDFS-5925
> Project: Hadoop HDFS
> Issue Type: Improvement
> Components: namenode
> Affects Versions: HDFS ACLs (HDFS-4685)
> Reporter: Chris Nauroth
> Assignee: Chris Nauroth
> Attachments: HDFS-5925.1.patch
>
>
> In follow-up discussion on HDFS-5899, we decided that it would cause less
> harm to administrators if setting {{dfs.namenode.acls.enabled}} to false only
> causes ACL API calls to be rejected. Existing ACLs found in fsimage or edits
> will be loaded and enforced.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
