[HADOOP-14899] Restrict Access to setPermission operation when authorization is enabled in WASB

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.1
• Fix Version/s: 2.9.0, 3.1.0
• Component/s: fs/azure
• Labels: fs secure wasb
• Target Version/s: 2.9.0
• Assignee: Kannapiran Srinivasan
• Reporter: Kannapiran Srinivasan
• Created: 22/Sep/17 10:55
• Updated: 07/Oct/17 10:21
• Resolved: 07/Oct/17 10:21

Description

In case of authorization enabled Wasb clusters, we need to restrict setting permissions on files or folders to owner or list of privileged users.

Currently in the WASB implementation even when authorization is enabled there is no check happens while doing setPermission call. In this JIRA we would like to add the check on the setPermission call in NativeAzureFileSystem implementation so that only owner or the privileged list of users or daemon users can change the permissions of files/folders