[
https://issues.apache.org/jira/browse/HDFS-6375?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14000994#comment-14000994
]
Charles Lamb commented on HDFS-6375:
------------------------------------
[~cnauroth], sorry for the ambiguity (I had to re-read it a few times myself).
What is being suggested are two things:
(1) Create a new "list xattrs" api which would list xattrs to those who have
permission, and
(2) Remove "scan" access completely -- you have to have read access or you
don't get anything.
So if you call the new proposed method in (1) and you only have "execute"
(scan) permission to the file/directory then you don't get back anything. This
would match the semantics of the Linux api: http://linux.die.net/man/2/listxattr
Does this make more sense?
> Listing extended attributes with the search permission
> ------------------------------------------------------
>
> Key: HDFS-6375
> URL: https://issues.apache.org/jira/browse/HDFS-6375
> Project: Hadoop HDFS
> Issue Type: Sub-task
> Components: namenode
> Affects Versions: HDFS XAttrs (HDFS-2006)
> Reporter: Andrew Wang
> Assignee: Charles Lamb
> Attachments: HDFS-6375.1.patch, HDFS-6375.2.patch, HDFS-6375.3.patch,
> HDFS-6375.4.patch
>
>
> From the attr(5) manpage:
> {noformat}
> Users with search access to a file or directory may retrieve a list of
> attribute names defined for that file or directory.
> {noformat}
> This is like doing {{getfattr}} without the {{-d}} flag, which we currently
> don't support.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
