Hadoop HDFS
  1. Hadoop HDFS
  2. HDFS-6711

FSNamesystem#getAclStatus does not write to the audit log.

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Minor Minor
    • Resolution: Duplicate
    • Affects Version/s: 3.0.0, 2.4.0
    • Fix Version/s: None
    • Component/s: namenode
    • Labels:
      None

      Description

      Consider writing an event to the audit log for the getAclStatus method.

        Issue Links

          Activity

          Hide
          Chris Nauroth added a comment -

          We need to confirm what is expected behavior for a read-only operation with respect to the audit log. This appears to be inconsistent in the code right now. getFileInfo writes to the audit log for both successful calls and access denied. getContentSummary logs only for successful calls, not for access denied. listStatus logs for both successful calls and access denied. listCacheDirectives and listCachePools log for both successful calls and access denied. getXAttrs and listXAttrs log only for access denied.

          Show
          Chris Nauroth added a comment - We need to confirm what is expected behavior for a read-only operation with respect to the audit log. This appears to be inconsistent in the code right now. getFileInfo writes to the audit log for both successful calls and access denied. getContentSummary logs only for successful calls, not for access denied. listStatus logs for both successful calls and access denied. listCacheDirectives and listCachePools log for both successful calls and access denied. getXAttrs and listXAttrs log only for access denied.
          Hide
          Chris Nauroth added a comment -

          I'm linking this to HDFS-5730, which seeks to make the audit logging policy consistent across all APIs. The decisions in that issue will influence our choice for how to fix this bug.

          Show
          Chris Nauroth added a comment - I'm linking this to HDFS-5730 , which seeks to make the audit logging policy consistent across all APIs. The decisions in that issue will influence our choice for how to fix this bug.
          Hide
          Chris Nauroth added a comment -

          This was fixed in HDFS-7218, so I'm resolving this as duplicate.

          Show
          Chris Nauroth added a comment - This was fixed in HDFS-7218 , so I'm resolving this as duplicate.

            People

            • Assignee:
              Unassigned
              Reporter:
              Chris Nauroth
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development