ECS 3.6.2 Data Access Guide

Bucket Custom Group ACLs and Default Group

You can enable access to the bucket based on user ACLs or by assigning Custom Group ACLs. Custom groups are names of user groups as defined on the Hadoop cluster and enable Hadoop users to access the bucket using HDFS.

Typical groups defined on the Hadoop cluster are hdfs (with user hdfs), hadoop (typically includes all service users), and users (includes other non-service users who access applications on the Hadoop cluster). You can create corresponding groups in the ECS Portal and assign permissions to them.

It is also possible to assign a Default Group for the bucket. The Default Group is the group assigned to the root (/) file system. For example, if the bucket owner is hdfs and the Default Group is set to hadoop, / is set to hdfs:hadoop as user and group, respectively. A Default Group is also a custom group and displays in the Custom Group ACL list.

drwx---rwx+ - hdfs 0 2018-03-09 12:30 /

drwxrwxrwx+ - hdfs hadoop 0 2018-03-09 12:28 /

These permissions are not inherited by directories created in the root.

If a Default Group is not assigned, the bucket owner (the owner of the root file system) can assign a group when accessing the HDFS from Hadoop, using thehdfs dfs -chgrp and hdfs dfs -chmod commends.