anchor.diff:  ====
   
   === Permission to access snapshot and data files
  -Generally, only the HBase owner or the HDFS admin have the permission to access hfiles.
  +Generally, only the HBase owner or the HDFS admin have the permission to access HFiles.
   
   link:https://issues.apache.org/jira/browse/HBASE-18659[HBASE-18659] use HDFS ACLs to make HBase granted user have the permission to access the snapshot files.
   
  -==== HDFS ACLs
  +==== link:https://hadoop.apache.org/docs/r2.7.1/hadoop-project-dist/hadoop-hdfs/HdfsPermissionsGuide.html#ACLs_Access_Control_Lists[HDFS ACLs]
   
  -HDFS ACLs supports an "access ACL", which defines the rules to enforce during permission checks, and a "default ACL", which defines the ACL entries that new child files or sub-directories receive automatically during creation.
  -By HDFS ACLs, HBase sync granted users with read permission to files.
  +HDFS ACLs supports an "access ACL", which defines the rules to enforce during permission checks, and a "default ACL",
  +which defines the ACL entries that new child files or sub-directories receive automatically during creation.
  +By HDFS ACLs, HBase sync granted users with read permission to HFiles.
   
   ==== Basic idea
   
  
positive.code: There are some limitations for this feature:
  
  =====
  If we enable this feature, some master operations such as grant, revoke, snapshot... (See the design doc for more details) will be slower as we need to sync HDFS ACLs to related hfiles.
  =====
  
  =====
  
negative.code: hbase.acl.sync.to.hdfs.enable=true
  ----
  
   * Modify table scheme to enable this feature for a specified table, this config is
   false by default for every table, this means the HBase granted acls will not be synced to HDFS
  ----
  alter 't1', CONFIGURATION => {'hbase.acl.sync.to.hdfs.enable' => 'true'}
  ----
  