Re: Collect feedback for HDFS-15638

2020-10-26 Thread Xinli shang
nded attribute could > be applied to a folder you would like permissions to be inherited from and > the plugin could use that? > > On Fri, Oct 23, 2020 at 5:11 PM Xinli shang > wrote: > > > So far we have feedbacks regarding the use of default ACLs and Sentry > with

Re: Collect feedback for HDFS-15638

2020-10-23 Thread Xinli shang
So far we have feedbacks regarding the use of default ACLs and Sentry with the NameNode plugin. Are there concerns about the risk of regression if we add this feature? On Mon, Oct 19, 2020 at 7:19 AM Xinli shang wrote: > Thanks Stephen for sharing out! > > I don't have those

Re: Collect feedback for HDFS-15638

2020-10-19 Thread Xinli shang
it > was down to the ACLs. Once we removed them at the HDFS level, heap usage > returned to normal. > > The ACLs at the HDFS level, if you have a lot of them, will certainly add > to NN heap pressure. > > On Sun, Oct 18, 2020 at 2:43 PM Xinli shang > wrote: > > > We

Re: Collect feedback for HDFS-15638

2020-10-18 Thread Xinli shang
sts and is fairly well proven in Hive > environments already, it would be simpler to just use it. > > > On Sat, Oct 17, 2020 at 3:23 PM Xinli shang > wrote: > > > Hi Vinayakumar, > > > > The staging tables are dynamic. From the Hadoop security team > perspective,

Re: Collect feedback for HDFS-15638

2020-10-17 Thread Xinli shang
e using single RPC. > > -Vinay > > On Sat, 17 Oct 2020 at 8:08 AM, Xinli shang > wrote: > > > Thanks Owen for your reply! As mentioned in the Jira, default ACLs don't > > apply to rename. Any idea how rename can work without setting ACLs per > > file? > >

Re: Collect feedback for HDFS-15638

2020-10-16 Thread Xinli shang
ble's directory, set the default ACL. That will have > exactly the effect that you are looking for without creating additional > semantics. > > .. Owen > > On Fri, Oct 16, 2020 at 7:02 PM Xinli shang > wrote: > > > Hi all, > > > > I opened https://is

Collect feedback for HDFS-15638

2020-10-16 Thread Xinli shang
s settings. By doing this way, Hive ETL doesn't need to set permissions at the file level. If that flag is not set(by default), work as before. To set/unset that flag, it would require admin privilege. -- Xinli Shang

[jira] [Created] (HDFS-15638) Make Hive tables directory permission check flat

2020-10-16 Thread Xinli Shang (Jira)
Xinli Shang created HDFS-15638: -- Summary: Make Hive tables directory permission check flat Key: HDFS-15638 URL: https://issues.apache.org/jira/browse/HDFS-15638 Project: Hadoop HDFS Issue Type