Hadoop HDFS Change Log for HDFS-4685 HDFS-4685 (Unreleased) INCOMPATIBLE CHANGES NEW FEATURES IMPROVEMENTS HADOOP-10185. FileSystem API for ACLs. (cnauroth) HADOOP-10186. Remove AclReadFlag and AclWriteFlag in FileSystem API. (Haohui Mai via cnauroth) HDFS-5596. Implement RPC stubs. (Haohui Mai via cnauroth) HDFS-5685. Implement ACL as a INode feature. (Haohui Mai via cnauroth) HDFS-5618. NameNode: persist ACLs in fsimage. (Haohui Mai via cnauroth) HDFS-5619. NameNode: record ACL modifications to edit log. (Haohui Mai via cnauroth) HADOOP-10187. FsShell CLI: add getfacl and setfacl with minimal support for getting and setting ACLs. (Vinay via cnauroth) HADOOP-10192. FileSystem#getAclStatus has incorrect JavaDocs. (cnauroth) HDFS-5673. Implement logic for modification of ACLs. (cnauroth) HADOOP-10220. Add ACL indicator bit to FsPermission. (cnauroth) HDFS-5758. NameNode: complete implementation of inode modifications for ACLs. (Chris Nauroth via wheat9) HDFS-5612. NameNode: change all permission checks to enforce ACLs in addition to permissions. (Chris Nauroth via wheat9) HDFS-5613. NameNode: implement handling of ACLs in combination with symlinks. (Chris Nauroth via wheat9) HDFS-5615. NameNode: implement handling of ACLs in combination with sticky bit. (Chris Nauroth via wheat9) HADOOP-10241. Clean up output of FsShell getfacl. (Chris Nauroth via wheat9) OPTIMIZATIONS BUG FIXES HDFS-5737. Replacing only the default ACL can fail to copy unspecified base entries from the access ACL. (cnauroth) HDFS-5739. ACL RPC must allow null name or unspecified permissions in ACL entries. (cnauroth) HADOOP-10213. Fix bugs parsing ACL spec in FsShell setfacl. (Vinay via cnauroth) HDFS-5799. Make audit logging consistent across ACL APIs. (cnauroth)