[Feature Request] Azure Data Lake Gen 2 | Cascade security settings

[danielstocker]

To my knowledge, there is currently no UI feature to reset and cascade security setting to child files and folders on the Azure Storage Explorer when using Azure Data Lake Gen2.

This is supported via the command line tools, but it would be nice to be able to reset and cascade permissions in Azure Storage Explorer directly.

[MRayermannMSFT]

Hey @danielstocker, what CLI tools support this scenario?

[danielstocker]

Sorry @MRayermannMSFT I wasn't clear at all in that statement.
What I was thinking off was using PowerShell (or another command line tool) as a REST client to both iterate through an existing DL Gen2 file system and apply permissions.

https://docs.microsoft.com/en-gb/rest/api/storageservices/datalakestoragegen2/path/list
https://docs.microsoft.com/en-gb/rest/api/storageservices/datalakestoragegen2/path/update

I realise that I made it sound like I'm thinking of a single CLI command to apply recursive permissions.

[sachinsbigdata]

Hi Daniel,
Thanks for your feedback. For the PowerShell client could you please add this request on the Azure feedback site (https://feedback.azure.com/forums/217298-storage). And tag it appropriately with Azure Data Lake Storage Gen2. That way we can track your request and you can get community support as well.

Regarding support in ASE, I will let MRayermann respond.

Thanks,
Sachin.

[MRayermannMSFT]

For us, this is the type of feature we will wait for the APIs to support.

[MRayermannMSFT]

Hi y'all, the storage service added an API that will allow us to do this. Thought I'm not sure if it'll be in a way that'll make y'all happy.

https://docs.microsoft.com/en-us/azure/storage/blobs/recursive-access-control-lists?tabs=azure-powershell

We'll be adding a feature which uses this API in version 1.17. You can track that work here: #3695

I'm going to leave this issue open for a while in-case y'all have anything to say. Eventually I will close it in favor of issue #3695 though. Thanks.

[MRayermannMSFT]

Hi all, 1.17 recently shipped with a feature that allows you to propagate the ACLs of a directory to all of it's existing descendants. Please give the feature a try and let us know if you have any feedback. Thanks! We'll monitor this issue for a bit and close it in the near future. 😊

[MRayermannMSFT]

Closing. If anyone has feedback feel free to open an issue. :)