You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@accumulo.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2013/10/29 00:12:30 UTC
[jira] [Commented] (ACCUMULO-1681) Adjust Authorizor Interface to
validate auths instead of retrieving a list
[ https://issues.apache.org/jira/browse/ACCUMULO-1681?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13807455#comment-13807455 ]
ASF subversion and git services commented on ACCUMULO-1681:
-----------------------------------------------------------
Commit 9a2041d56019e253b08732c9d931e99981f41660 in branch refs/heads/master from [~jvines@gmail.com]
[ https://git-wip-us.apache.org/repos/asf?p=accumulo.git;h=9a2041d ]
ACCUMULO-1681 - Rolling in match (after merging)
> Adjust Authorizor Interface to validate auths instead of retrieving a list
> --------------------------------------------------------------------------
>
> Key: ACCUMULO-1681
> URL: https://issues.apache.org/jira/browse/ACCUMULO-1681
> Project: Accumulo
> Issue Type: Bug
> Components: tserver
> Reporter: John Vines
> Assignee: John Vines
> Fix For: 1.6.0
>
> Attachments: ACCUMULO-1681.patch, ACCUMULO-1681.v2.patch
>
>
> Currently the Authorizor interface is used to request a set of authorizations which then get checked against the authorizations a user is attempting to use. However, some security systems only support the ability to validate authorizations/permissions/roles and not provide a list. That makes these systems (entirely) incompatible with Accumulo when they don't have to be.
> We should switch the behavior of Accumulo to ask the Authorizor (via SecurityOperations) if the auths are valid. The existing getAuths functionality will still use that call and would have potentially limited support, similar to the potentially limited support of any of the set operations.
--
This message was sent by Atlassian JIRA
(v6.1#6144)