zfs discuss - Aug 2011 - zfs send & delegated permissions

After replicating a pool with zfs send/recv I''ve found out I cannot
perform some zfs on those datasets anymore. The datasets had permissions
set via `zfs allow''. To verify assumption I did

  $ zfs allow blah create tank/foo
  $ zfs allow tank/foo
  ---- Permissions on tank/foo --------------------------------------------
  Local+Descendent permissions:
          user blah create
  $ zfs snapshot tank/foo at send
  $ zfs send -p tank/foo at send | zfs recv tank/bar
  $ zfs allow tank/bar
  [nothing]

  $ zfs create -sV1g tank/foo
  $ zfs create -sV1g tank/bar
  $ zpool create foo zvol/tank/foo
  $ zpool create bar zvol/tank/bar
  $ zfs allow blah create foo
  $ zfs allow foo
  ---- Permissions on foo --------------------------------------------
  Local+Descendent permissions:
          user blah create
  $ zfs snapshot -r foo at send
  $ zfs send -R foo at send | zfs recv -F bar
  $ zfs allow bar
  [nothing]

So, what are permissions if not properties? And why they''re not
sent unlike say user/group quotas?

--
ZFSv28 as of FreeBSD 9.0-BETA1 r224776M amd64

On Thu, Aug 11, 2011 at 11:14 AM, Test Rat <ttsestt at gmail.com> wrote:
> After replicating a pool with zfs send/recv I''ve found out I
cannot
> perform some zfs on those datasets anymore. The datasets had permissions
> set via `zfs allow''.
>
...
>
> So, what are permissions if not properties?

Properties are things that are set with "zfs set".  Permissions are
not
properties, and as you discovered, are unfortunately not transferred with
"zfs send".

> And why they''re not
> sent unlike say user/group quotas?

User/group quotas are also properties (eg. "zfs set userquota at ahrens
1ZB").

So this is working as designed, but I think it would be a nice enhancement
to also (optionally) send the "zfs allow" permissions.  You would have
to
implement a way to serialize the permissions, which are stored differently
than properties.

What''s the scenario where you''d like to send permissions?
Backup?

--matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20110813/616e89a8/attachment.html>