[HADOOP-2514] Trash and permissions don't mix

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.16.0
• Fix Version/s: 0.16.0
• Assignee: Doug Cutting
• Reporter: Robert Chansler
• Created: 03/Jan/08 04:39
• Updated: 02/May/15 03:13
• Resolved: 15/Jan/08 23:16

Description

Shell command "rm" is really "mv" to trash with the expectation that the server will at some point really delete the contents of trash. With the advent of permissions, a user can "mv" folders that the user cannot "rm". The present trash feature as implemented would allow the user to suborn the server into deleting a folder in violation of the permissions model.

A related issue is that if anybody can mv a folder to the trash anybody else can mv that same folder from the trash. This may be contrary to the expectations of the user.

What is a better model for trash?

Issue Links

• is blocked by: HADOOP-2567 add FileSystem#getHomeDirectory() method
• is related to: HADOOP-8598 Server-side Trash
• relates to: HDFS-8312 Trash does not descent into child directories to check for permissions