[
https://issues.apache.org/jira/browse/HDDS-3572?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
mingchao zhao updated HDDS-3572:
--------------------------------
Description:
In some cases, a particular user need to access all the keys.
When acl enabled, if there is a user needed access all the keys. We need to
increase the user's access to all the keys. Usually there are a lot of keys in
a cluster, so it's very difficult to add permissions to all keys. So a
whitelist needed. Users in this list will not be checked for permissions.
I found that the current ozone Administrators cannot access all keys.
Administrators of ozone are also checked for permissions. In HDFS,
Administrators can able to access all files，and HDFS does not check permissions
of Administrators.
was:
In some cases, a particular user need to access all the keys.
When acl enabled, if there is a user needed access all the keys. We need to
increase the user's access to all the keys. Usually there are a lot of keys in
a cluster, so it's very difficult to add permissions to all keys. So a
whitelist needed. Users in this list will not be checked for permissions.
> Make sure ozone. administrators have access to all keys when acl enabled.
> --------------------------------------------------------------------------
>
> Key: HDDS-3572
> URL: https://issues.apache.org/jira/browse/HDDS-3572
> Project: Hadoop Distributed Data Store
> Issue Type: Improvement
> Components: om
> Reporter: mingchao zhao
> Priority: Major
> Labels: pull-request-available
>
> In some cases, a particular user need to access all the keys.
> When acl enabled, if there is a user needed access all the keys. We need to
> increase the user's access to all the keys. Usually there are a lot of keys
> in a cluster, so it's very difficult to add permissions to all keys. So a
> whitelist needed. Users in this list will not be checked for permissions.
> I found that the current ozone Administrators cannot access all keys.
> Administrators of ozone are also checked for permissions. In HDFS,
> Administrators can able to access all files，and HDFS does not check
> permissions of Administrators.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
