Details
-
Bug
-
Status: Open
-
Minor
-
Resolution: Unresolved
-
3.3.6
-
None
Description
In HDFS-14743 the operationType was implemented as a thread-local, which requires the caller to set the thread-local before calling the AccessControlEnforcer interface.
Most operations will set the operationType to a String, but some operations set it to null.
This causes the FSPermissionChecker to always call the old (deprecated) AccessControlEnforcer.checkPermission API (see
https://github.com/apache/hadoop/blob/50d256ef3c2531563bc6ba96dec6b78e154b4697/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/namenode/FSPermissionChecker.java#L431)
Instead of setting the operationType to null (e.g. here) we should set the correct value.
Attachments
Issue Links
- links to