feature: posix bucket support acl (#183)

Author: hushengquan

pom.xml

@@ -6,7 +6,7 @@
 
     <groupId>com.qcloud.cos</groupId>
     <artifactId>hadoop-cos</artifactId>
-    <version>8.3.26</version>
+    <version>8.3.27</version>
     <packaging>jar</packaging>
 
     <name>Apache Hadoop Tencent Cloud COS Support</name>

src/main/java/org/apache/hadoop/fs/CosFileSystem.java

@@ -7,6 +7,8 @@
 import org.apache.hadoop.conf.Configuration;
 import org.apache.hadoop.fs.cosn.Constants;
 import org.apache.hadoop.fs.cosn.OperationCancellingStatusProvider;
+import org.apache.hadoop.fs.permission.AclEntry;
+import org.apache.hadoop.fs.permission.AclStatus;
 import org.apache.hadoop.fs.permission.FsPermission;
 import org.apache.hadoop.security.AccessControlException;
 import org.apache.hadoop.security.UserGroupInformation;
@@ -484,6 +486,54 @@ public void setTimes(Path p, long mtime, long atime) throws IOException {
         this.actualImplFS.setTimes(p, mtime, atime);
     }
 
+    @Override
+    public void setAcl(Path path, List<AclEntry> aclSpec) throws IOException {
+        LOG.debug("set acl, path: {}, aclSpec: {}", path, aclSpec);
+        checkInitialized();
+        checkPermission(path, RangerAccessType.WRITE);
+        this.actualImplFS.setAcl(path, aclSpec);
+    }
+
+    @Override
+    public AclStatus getAclStatus(Path path) throws IOException {
+        LOG.debug("getAclStatus, path: {}", path);
+        checkInitialized();
+        checkPermission(path, RangerAccessType.READ);
+        return this.actualImplFS.getAclStatus(path);
+    }
+
+    @Override
+    public void modifyAclEntries(Path path, List<AclEntry> aclSpec) throws IOException {
+        LOG.debug("modifyAclEntries, path: {}, aclSpec: {}", path, aclSpec);
+        checkInitialized();
+        checkPermission(path, RangerAccessType.WRITE);
+        this.actualImplFS.modifyAclEntries(path, aclSpec);
+    }
+
+    @Override
+    public void removeAclEntries(Path path, List<AclEntry> aclSpec) throws IOException {
+        LOG.debug("removeAclEntries, path: {}, aclSpec: {}", path, aclSpec);
+        checkInitialized();
+        checkPermission(path, RangerAccessType.WRITE);
+        this.actualImplFS.removeAclEntries(path, aclSpec);
+    }
+
+    @Override
+    public void removeDefaultAcl(Path path) throws IOException {
+        LOG.debug("removeDefaultAcl, path: {}", path);
+        checkInitialized();
+        checkPermission(path, RangerAccessType.WRITE);
+        this.actualImplFS.removeDefaultAcl(path);
+    }
+
+    @Override
+    public void removeAcl(Path path) throws IOException {
+        LOG.debug("removeAcl, path: {}", path);
+        checkInitialized();
+        checkPermission(path, RangerAccessType.WRITE);
+        this.actualImplFS.removeAcl(path);
+    }
+
     public NativeFileSystemStore getStore() {
         return this.nativeStore;
     }

src/main/java/org/apache/hadoop/fs/CosNFileReadTask.java

@@ -128,18 +128,23 @@ private void retrieveBlock() throws IOException, CancelledException {
         byte[] dataBuf = readBuffer.getBuffer();
         checkStreamClosed();
         Objects.requireNonNull(dataBuf);
-        InputStream inputStream;
-        inputStream = this.store.retrieveBlock(
-                    this.key, this.readBuffer.getStart(), this.readBuffer.getEnd());
-        IOUtils.readFully(
-            inputStream, dataBuf, 0,
-            dataBuf.length);
-        int readEof = inputStream.read();
-        if (readEof != -1) {
-            LOG.error("Expect to read the eof, but the return is not -1. key: {}.", this.key);
+        InputStream inputStream = null;
+        try {
+            inputStream = this.store.retrieveBlock(
+                        this.key, this.readBuffer.getStart(), this.readBuffer.getEnd());
+            IOUtils.readFully(
+                inputStream, dataBuf, 0,
+                dataBuf.length);
+            int readEof = inputStream.read();
+            if (readEof != -1) {
+                LOG.error("Expect to read the eof, but the return is not -1. key: {}.", this.key);
+            }
+            this.readBuffer.setStatus(CosNFSInputStream.ReadBuffer.SUCCESS);
+        } finally {
+            if (inputStream != null) {
+                inputStream.close();
+            }
         }
-        inputStream.close();
-        this.readBuffer.setStatus(CosNFSInputStream.ReadBuffer.SUCCESS);
     }
 
     private void checkStreamClosed() throws CancelledException {