[HDFS-14517] Display bug in permissions when ACL mask is defined

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Not A Problem
• Component/s: namenode

Environment

Tested on latest CDH integration, and CDH5 as well with the same result.

• Assignee: Unassigned
• Reporter: István Fajth
• Created: 28/May/19 19:01
• Updated: 28/Jun/19 22:10
• Resolved: 28/Jun/19 22:10

Description

When ACLs are enabled on a folder, the following sequence of commands provide the following result:

 

{{$ hdfs dfs -mkdir /tmp/acl
$ hdfs dfs -ls /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxr-xr-x   - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
$ hdfs dfs -getfacl /tmp/acl

1. file: /tmp/acl
2. owner: hdfs
3. group: supergroup
   user::rwx
   group::r-x
   other::r-x

$ hdfs dfs -setfacl -m mask::rwx /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxrwxr-x+  - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
drwx-wx-wx   - hive   supergroup          0 2019-05-27 23:48 /tmp/hive
drwxrwxrwt   - mapred hadoop              0 2019-05-28 01:32 /tmp/logs
$ hdfs dfs setfacl -m mask::r- /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxr--r-x+  - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
$ hdfs dfs -setfacl -m mask::r-x /tmp/acl
$ hdfs dfs -ls /tmp
Found 1 items
drwxr-xr-x+  - hdfs   supergroup          0 2019-05-28 11:48 /tmp/acl
$ hdfs dfs -getfacl /tmp/acl

1. file: /tmp/acl
2. owner: hdfs
3. group: supergroup
   user::rwx
   group::r-x
   mask::r-x
   other::r-x}}

 

So the group permission representation is changing with the defined mask ACL instead of the group ACL or, maybe even better, the effective group ACL.

Issue Links

• is related to: HDFS-14619 chmod changes the mask when ACL is enabled