[
https://issues.apache.org/jira/browse/HBASE-18659?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16554995#comment-16554995
]
Duo Zhang commented on HBASE-18659:
-----------------------------------
[~Yi Mei] IIRC, if we enable this feature, the acl related operations such as
grant and revoke will be much slower as we need to set acl to all the existing
files? And do we need to do some extra works when enabling this feature on an
existing cluster which already have acls set? And also, what if snapshot a
table and then clone it with another name? If it does not work than we need to
mention it in the design doc.
Thanks.
> Use HDFS ACL to give user the ability to read snapshot directly on HDFS
> -----------------------------------------------------------------------
>
> Key: HBASE-18659
> URL: https://issues.apache.org/jira/browse/HBASE-18659
> Project: HBase
> Issue Type: New Feature
> Reporter: Duo Zhang
> Assignee: Yi Mei
> Priority: Major
> Attachments: HBASE-18659.master.001.patch,
> HBASE-18659.master.002.patch, HBASE-18659.master.003.patch,
> HBASE-18659.master.004.patch, HBASE-18659.master.005.patch,
> HBASE-18659.master.006.patch, HBASE-18659.master.007.patch,
> HBASE-18659.master.008.patch
>
>
> On the dev meetup notes in Shenzhen after HBaseCon Asia, there is a topic
> about the permission to read hfiles on HDFS directly.
> {quote}
> For client-side scanner going against hfiles directly; is there a means of
> being able to pass the permissions from hbase to hdfs?
> {quote}
> And at Xiaomi we also face the same problem. {{SnapshotScanner}} is much
> faster and consumes less resources, but only super use has the ability to
> read hfile directly on HDFS.
> So here we want to use HDFS ACL to address this problem.
> https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#ACLs_File_System_API
> The basic idea is to set acl and default acl on the ns/table/cf directory on
> HDFS for the users who have the permission to read the table on HBase.
> Suggestions are welcomed.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
