[HDDS-5306] Ozone Shell getacl capable of printing ACL string the way it is fed to setacl

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Ozone CLI
• Assignee: Unassigned
• Reporter: Siyao Meng
• Created: 04/Jun/21 20:04
• Updated: 04/Jun/21 20:05

Description

getacl should be able to return the ACL string (e.g. user:user1:rw,group:hadoop:a) the same way ACL is set for better usability. This is useful when one wants to delete an ACL via CLI, or slightly change the ACL with copy-pasting. Currently, getacl can only return a JSON array:

$ ozone sh bucket addacl vol1/bucket-src --acls=user:user1:rw,group:hadoop:a
ACL user:user1:rw[ACCESS] added successfully.
ACL group:hadoop:a[ACCESS] added successfully.

$ ozone sh bucket getacl vol1/bucket-src
[ {
  "type" : "USER",
  "name" : "testuser/[e-mail]",
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
}, {
  "type" : "GROUP",
  "name" : "root",  # Just added
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
}, {
  "type" : "USER",
  "name" : "user1", # Just added
  "aclScope" : "ACCESS",
  "aclList" : [ "READ", "WRITE" ]
}, {
  "type" : "GROUP",
  "name" : "hadoop",
  "aclScope" : "ACCESS",
  "aclList" : [ "ALL" ]
} ]