[HDFS-11364] Add a test to verify Audit log entries for setfacl/getfacl commands over FS shell

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-alpha1
• Fix Version/s: 2.9.0, 3.0.0-alpha4
• Component/s: hdfs, test
• Target Version/s: 2.9.0
• Hadoop Flags: Reviewed
• Assignee: Manoj Govindassamy
• Reporter: Manoj Govindassamy
• Created: 24/Jan/17 00:51
• Updated: 26/Jan/17 19:13
• Resolved: 26/Jan/17 19:02

Description

The general phenomena has been to Audit log all successful commands and the ones resulting in AccessControlException. For ACLs, we do have a unit test covering the AccessControlException/Failure cases. Would be better if we can have a unit test covering the successful ACL APIs and ACL commands over FS shell as well.

Additionally, FS Shell getfacl command has a performance improvement (HADOOP-12776) where by the shell would skip the call to getAclStatus if the permission bits in getFileInfo() doesn't have ACL bit set. Good to have Audit log test covering this case.

Issue Links

• depends upon: HADOOP-12776 Remove getaclstatus call for non-acl commands in getfacl.