[ 
https://issues.apache.org/jira/browse/HDFS-5925?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13898068#comment-13898068
 ] 

Chris Nauroth commented on HDFS-5925:
-------------------------------------

Thank you for reviewing, Vinay.  I implemented the check on fsimage initially 
in HDFS-5899.  Then, while working on HDFS-5914, Colin and Haohui raised their 
concerns about these checks.  We removed the fsimage check temporarily during 
HDFS-5914, and now we're making the final decision to remove the fsimage and 
edits checks permanently.  That's why you don't see anything related to fsimage 
in the current patch.

> ACL configuration flag must only reject ACL API calls, not ACLs present in 
> fsimage or edits.
> --------------------------------------------------------------------------------------------
>
>                 Key: HDFS-5925
>                 URL: https://issues.apache.org/jira/browse/HDFS-5925
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: namenode
>    Affects Versions: HDFS ACLs (HDFS-4685)
>            Reporter: Chris Nauroth
>            Assignee: Chris Nauroth
>         Attachments: HDFS-5925.1.patch
>
>
> In follow-up discussion on HDFS-5899, we decided that it would cause less 
> harm to administrators if setting {{dfs.namenode.acls.enabled}} to false only 
> causes ACL API calls to be rejected.  Existing ACLs found in fsimage or edits 
> will be loaded and enforced.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to