whbing opened a new pull request, #3938:
URL: https://github.com/apache/ozone/pull/3938

   
   ## What is the link to the Apache JIRA
   
   https://issues.apache.org/jira/browse/HDDS-7461
   NativeACL: Change parent context right WRITE to CREATE when CRATE_BUCKET
   
   ## How was this patch tested?
   1. Unit tests
   2. Test in test-environment.
   
   Test as follows:
   
   **(1) without pr:**
   ```bash
   $ ozone sh vol getacl vol1
   [ {
     "type" : "USER",
     "name" : "userA",
     "aclScope" : "ACCESS",
     "aclList" : [ "READ", "WRITE" ]
   } ]
   ```
   userA can create bucket with WRITE permission:
   ```bash
   $ ozone sh bucket create vol1/buk-1
   ```
   **(2) with pr:**
   userA cannot create bucket:
   ```bash
   ozone sh bucket create vol1/buk-2
   PERMISSION_DENIED User userA doesn't have CREATE permission to access bucket 
Volume:vol1 Bucket:buk-2
   ```
   userA with CREATE permission on vol1 can create bucket.
   ```bash
   $ ozone sh vol getacl vol1
   [ {
     "type" : "USER",
     "name" : "userA",
     "aclScope" : "ACCESS",
     "aclList" : [ "READ", "WRITE", "CREATE" ]
   } ]
   
   $ ozone sh bucket create vol1/buk-3
   ```
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to