[HDDS-2496] Delegate Ozone volume create/list ACL check to authorizer plugin

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.4.1
• Fix Version/s: 0.5.0
• Component/s: Ozone Manager, Security
• Labels: Triaged
• Target Version/s: 0.5.0
• Assignee: Vivek Ratnavel Subramanian
• Reporter: Vivek Ratnavel Subramanian
• Created: 14/Nov/19 22:27
• Updated: 10/Jun/20 00:34
• Resolved: 10/Jun/20 00:34

Description

Today Ozone volume create/list ACL check are not sent to authorization plugins. This cause problem when authorization plugin is enabled. Admin still need to modify ozone-site.xml to change ozone.administrators to configure admin to create volume

 

This ticket is opened to have a consistent ACL check for all Ozone resources requests including admin request like volume create. This way, the admin defined by the authorization plugin can be honored during volume provision without restart ozone services. 

Issue Links

• is related to: HDDS-3391 Delegate admin ACL checks to Ozone authorizer plugin