[HDFS-8736] ability to deny access to HDFS filesystems

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.5.0
• Component/s: security
• Labels: security
• Assignee: Unassigned
• Reporter: Purvesh Patel
• Created: 08/Jul/15 17:25
• Updated: 14/Jul/15 17:27

Description

In order to run in a secure context, ability to deny access to different filesystems(specifically the local file system) to non-trusted code this patch adds a new SecurityPermission class(AccessFileSystemPermission) and checks the permission in FileSystem#get before returning a cached file system or creating a new one. Please see attached patch.