smengcl opened a new pull request, #4911:
URL: https://github.com/apache/ozone/pull/4911

   ## What changes were proposed in this pull request?
   
   It is unnecessary to call `checkAcls()` twice when caller is volume owner in 
`OzoneAclUtils#checkAllAcls`.
   
   Because the reason we had to split that into two calls in 
[HDDS-5903](https://issues.apache.org/jira/browse/HDDS-5903) is because Ranger 
only has one `{OWNER}` tag, and that we want `{OWNER}` tag on bucket/key level 
policies to be filled in with the bucket owner during ACL check if the caller 
is NOT the volume owner.
   
   In the case where the caller is volume owner, this hierarchy is already 
enforced by the authorizer (`OzoneNativeAuthorizer` or `RangerOzoneAuthorizer`) 
internally. Thus it is unnecessary.
   
   ## What is the link to the Apache JIRA
   
   https://issues.apache.org/jira/browse/HDDS-8864
   
   ## How was this patch tested?
   
   - All existing tests should pass.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to