Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-18659

Use HDFS ACL to give user the ability to read snapshot directly on HDFS

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Patch Available
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      On the dev meetup notes in Shenzhen after HBaseCon Asia, there is a topic about the permission to read hfiles on HDFS directly.

      For client-side scanner going against hfiles directly; is there a means of being able to pass the permissions from hbase to hdfs?

      And at Xiaomi we also face the same problem. SnapshotScanner is much faster and consumes less resources, but only super use has the ability to read hfile directly on HDFS.

      So here we want to use HDFS ACL to address this problem.

      https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#ACLs_File_System_API

      The basic idea is to set acl and default acl on the ns/table/cf directory on HDFS for the users who have the permission to read the table on HBase.

      Suggestions are welcomed.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                meiyi Yi Mei
                Reporter:
                zhangduo Duo Zhang
              • Votes:
                0 Vote for this issue
                Watchers:
                13 Start watching this issue

                Dates

                • Created:
                  Updated: