[HDDS-4593] Refine IAccessAuthorizer interface to do recursive ACL check on a path

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.0
• Labels: pull-request-available
• Assignee: Rakesh Radhakrishnan
• Reporter: Rakesh Radhakrishnan
• Created: 15/Dec/20 18:04
• Updated: 20/Jan/21 13:12
• Resolved: 20/Jan/21 13:12

Description

OM server is presently doing ACL check access for each path separately. This will become too costly RPC calls assume if user performs recursive delete on a path where there are millions of sub-directories under this path.

The idea/proposal is to refine #checkAccess interface by giving "recursiveDelete" hint and make only one single call and the implementation classes(native or external entity) can do recursive logic in an optimized way.

 

IAccessAuthorizer#checkAccess(IOzoneObj ozoneObject, RequestContext context)

public class RequestContext {
     …...
     private final boolean recursiveDelete; // add new attribute
}

Issue Links

• is related to: HDDS-2939 Ozone FS namespace
• links to: GitHub Pull Request #1790