Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-17378

Missing operationType for some operations in authorizer

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 3.3.6
    • None
    • hdfs

    Description

      In HDFS-14743 the operationType was implemented as a thread-local, which requires the caller to set the thread-local before calling the AccessControlEnforcer interface.
      Most operations will set the operationType to a String, but some operations set it to null.
      This causes the FSPermissionChecker to always call the old (deprecated) AccessControlEnforcer.checkPermission API (see
      https://github.com/apache/hadoop/blob/50d256ef3c2531563bc6ba96dec6b78e154b4697/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/server/namenode/FSPermissionChecker.java#L431)

      Instead of setting the operationType to null (e.g. here) we should set the correct value.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              sbernauer Sebastian Bernauer
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: