Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-4618

Prefix resource type access check not effect after set key prefix ACLs

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 1.1.0
    • Fix Version/s: None
    • Labels:
      None
    • Environment:

      Spring Boot: 2.2.6.RELEASE

      Apache Ozone (Client): 1.1.0-SNAPSHOT(master)

      Apache HDFS: 2.7.2

    • Target Version/s:

      Description

      Listing file statues with ozone filesystem api in my SpringBoot project. the invoke chain(like):
      FileSystem#listStatus
      --> BasicRootedOzoneFileSystem#listStatus
      --> BasicOzoneClientAdapterImpl#listStatus
      --> OzoneBucket#listStatus
      --> RpcClient#listStatus
      --> OzoneManagerProtocolClientSideTranslatorPB#listStatus
      --> OzoneManager#listStatus.

      in OzoneManager, it's not supported PREFIX resource type in getResourceType method, there's Screenshot below:

      the OzoneManager#listStatus method:
      the OzoneManager#getResourceType method(not supported PREFIX resource type):

      in OzoneNativeAuthorizer#checkAccess method, it's supported PREFIX resource type. 

      in my case, we set ACLs to "dir" key with PREFIX resource type user native API, when listing file statues by this "dir" key by native API, it's go into KEY resource type case.

        Attachments

        1. image-2020-12-22-20-36-05-469.png
          81 kB
          masstter
        2. image-2020-12-22-20-36-31-426.png
          52 kB
          masstter
        3. image-2020-12-22-20-38-06-503.png
          231 kB
          masstter

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              masstter masstter
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: