Hadoop HDFS Change Log for HDFS-4685 HDFS-4685 (Unreleased) INCOMPATIBLE CHANGES NEW FEATURES IMPROVEMENTS HADOOP-10185. FileSystem API for ACLs. (cnauroth) HADOOP-10186. Remove AclReadFlag and AclWriteFlag in FileSystem API. (Haohui Mai via cnauroth) HDFS-5596. Implement RPC stubs. (Haohui Mai via cnauroth) HDFS-5685. Implement ACL as a INode feature. (Haohui Mai via cnauroth) HDFS-5618. NameNode: persist ACLs in fsimage. (Haohui Mai via cnauroth) HDFS-5619. NameNode: record ACL modifications to edit log. (Haohui Mai via cnauroth) HADOOP-10187. FsShell CLI: add getfacl and setfacl with minimal support for getting and setting ACLs. (Vinay via cnauroth) HADOOP-10192. FileSystem#getAclStatus has incorrect JavaDocs. (cnauroth) HDFS-5673. Implement logic for modification of ACLs. (cnauroth) HADOOP-10220. Add ACL indicator bit to FsPermission. (cnauroth) HDFS-5758. NameNode: complete implementation of inode modifications for ACLs. (Chris Nauroth via wheat9) HDFS-5612. NameNode: change all permission checks to enforce ACLs in addition to permissions. (Chris Nauroth via wheat9) HDFS-5613. NameNode: implement handling of ACLs in combination with symlinks. (Chris Nauroth via wheat9) HDFS-5615. NameNode: implement handling of ACLs in combination with sticky bit. (Chris Nauroth via wheat9) HADOOP-10241. Clean up output of FsShell getfacl. (Chris Nauroth via wheat9) HDFS-5702. FsShell Cli: Add XML based End-to-End test for getfacl and setfacl commands. (Vinay via cnauroth) HDFS-5608. WebHDFS: implement ACL APIs. (Sachin Jose and Renil Joseph via cnauroth) HDFS-5614. NameNode: implement handling of ACLs in combination with snapshots. (cnauroth) HDFS-5858. Refactor common ACL test cases to be run through multiple FileSystem implementations. (cnauroth) HDFS-5860. Refactor INodeDirectory getDirectoryXFeature methods to use common getFeature helper method. (Jing Zhao via cnauroth) HDFS-5861. Add CLI test for Ls output for extended ACL marker. (Vinay via cnauroth) OPTIMIZATIONS BUG FIXES HDFS-5737. Replacing only the default ACL can fail to copy unspecified base entries from the access ACL. (cnauroth) HDFS-5739. ACL RPC must allow null name or unspecified permissions in ACL entries. (cnauroth) HADOOP-10213. Fix bugs parsing ACL spec in FsShell setfacl. (Vinay via cnauroth) HDFS-5799. Make audit logging consistent across ACL APIs. (cnauroth) HADOOP-10277. setfacl -x fails to parse ACL spec if trying to remove the mask entry. (Vinay via cnauroth) HDFS-5849. Removing ACL from an inode fails if it has only a default ACL. (cnauroth) HADOOP-10270. getfacl does not display effective permissions of masked entries. (cnauroth)