glusterfs.git/xlators/system, branch v3.3.0qa3

posix-acl: disable permission checks for fd based ops

2011-08-11T05:06:56+00:00

If write calls are coming in through an fd with O_RDWR or O_WRONLY
flag then a permission check is unnecessary. However writes from
NFS ideally need a "stateless" check in each call and this results
in a permission failure due to the read-only mode (disregarding the
FD's writeability).

For now it is acceptable to disable write checks as almost always
the NFS client would already be doing such basic access control.
Also because the previous access-control translator (prior to
posix ACL introduction) too was permitting writes and reads
unconditionally.

In fact the Linux KNFS server too assumes the NFS client would have
done the permission check.

Change-Id: I33e5de8911a87881f9341b8b92574780c2dfbeba
BUG: 3388
Reviewed-on: http://review.gluster.com/208
Tested-by: Gluster Build System 
Reviewed-by: Anand Avati

LICENSE: s/GNU Affero General Public/GNU General Public/

2011-08-06T13:33:52+00:00

Change-Id: I3914467611e573cccee0d22df93920cf1b2eb79f
BUG: 3348
Reviewed-on: http://review.gluster.com/182
Tested-by: Gluster Build System 
Reviewed-by: Anand Avati

posix-acl: perform access checks on read/write/truncate for NFS calls

2011-07-13T10:00:51+00:00

Signed-off-by: Anand Avati 

BUG: 2815 (Server-enforced ACLs)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=2815
Signed-off-by: shishir gowda 
Signed-off-by: Anand Avati 

BUG: 2815 (Server-enforced ACLs)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=2815

access-control: Handle F_OK in perm check, and O_APPEND, O_TRUNC in open

2011-07-13T10:00:45+00:00

Signed-off-by: shishir gowda 
Signed-off-by: Anand Avati 

BUG: 3057 (acl permissions don't work on nfs mount)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3057

BUG: 3057 (acl permissions don't work on nfs mount)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3057

access-control: NFS access control expects a return of valid mode

2011-07-13T10:00:29+00:00

The permission check is same as that of posix. We break the requests
into single checks, aggregate all the valid modes and return in reply.

Signed-off-by: shishir gowda 
Signed-off-by: Vijay Bellur 

BUG: 3057 ()
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3057
Signed-off-by: Anand Avati 

BUG: 3057 (acl permissions don't work on nfs mount)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3057

access-control: Save group permissions returned from backend

2011-07-13T10:00:23+00:00

The backend permissions returned in stat for group is already masked
value. Use the xattr value

Signed-off-by: shishir gowda 
Signed-off-by: Vijay Bellur 

BUG: 3102 ()
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3102
Signed-off-by: Anand Avati 

BUG: 3102 (Read calls go ahead even when the group has no permissions)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3102

access-control: Return mode part of NFS access control request

2011-07-13T10:00:17+00:00

Signed-off-by: shishir gowda 
Signed-off-by: Vijay Bellur 

BUG: 3057 ()
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3057
Signed-off-by: Anand Avati 

BUG: 3057 (acl permissions don't work on nfs mount)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=3057

access-control: superseded by posix-acl translator

2011-07-08T09:26:17+00:00

Signed-off-by: Anand Avati 

BUG: 2815 (Server-enforced ACLs)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=2815

posix-acl: implementation of POSIX ACL as a translator

2011-07-08T09:26:11+00:00

Signed-off-by: Anand Avati 

BUG: 2815 (Server-enforced ACLs)
URL: http://bugs.gluster.com/cgi-bin/bugzilla3/show_bug.cgi?id=2815