Files view- how to select specific folders

[#1]

Hi all,

I am an Ambari admin and am able to make file views and allocate users to views, however, I want to make a file view such that the selected user is ONLY able to access the specific folder where their data is kept. I am currently only able to allocate them a file view wherein they can go into ANY of the folders.

Could someone please tell me how to customise the file view such that I can make only certain folders viewable to certain users?

I do not have Ranger and have looked at quite a few posts, but have not been able to workout how to do this. Any advice would be greatly appreciated.

Thanks.

[#2 · Accepted solution]

@badoop

Unfortunately Ambari File View does not have such capability to assign HDFS folder specific access rights.

However Ranger can provide such feature.

As you do not have Ranger hence you may want to look at the HDFS ACLs : http://hortonworks.com/blog/hdfs-acls-fine-grained-permissions-hdfs-files-hadoop/

And

https://hadoop.apache.org/docs/r2.4.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html

.

[#3]

@jss

Many thanks for this, I have managed to enable ACLs by altering 'Custom hdfs-site.xml' via linux cmd and then in Ambari itself, but I can't wuite see how this enables me to hide certain folders in the files view in Ambari; the directories in Ambari do not match those that I can see in Linux, could you please advise how exactly to control access to the Ambari files view using the ACLs? The 'BLOCKING ACCESS TO A SUB-TREE FOR A SPECIFIC USER' section seems to be what I need, but I'm having trouble in locating the Ambari directories from Linux.

Thanks again.

EDIT: I am now able to access the ambari file structure via Linux, I just need to be able to set ACLs on the relevant folders for certain users

[#4]

Hi,

Could anyone please advise as to how exactly I could use ACLs to limit user views in the file view section? As mentioned above, I can limit a user view to the files view, but need to make it so that a user is only able to access certain folders and not all of them.

Thanks.