lablup / lablup/backend.ai

Remove RWD from vfolder permissions

Open
#3,436 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
670
Forks
183
Avg merge
17h 7m
Merged PRs (30d)
358

Description

Currently we have RO (read-only), RW (read-write), and RWD (read-write-delete) permission levels for a vfolder.

> The above 3-level vfolder permissions are for _bind-mount_ permissions in containers, and **_different from_** vfolder RBAC which defines the access & manipulation privileges of vfolder objects in the [Backend.AI](http://Backend.AI) control plane.

The RWD concept was first introduced in circa 2017, and I had planned to implement it by blocking `unlink` syscalls in the jail.

However, it turns out to be a useless concept and we did not implement it until now, because it is impossible to distinguish the normal application pattern to modify existing files by cloning and removing files.

Let’s retire and remove the RWD permissions from our codebase and the UI as well.

For backward compatibility of the API, we can coalesce RWD to RW safely when accepting API parameters.

JIRA Issue: BA-505

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.