[jira] Commented: (MAPREDUCE-1455) Authorization for servlets

["Ravi Gummadi (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MAPREDUCE-1455?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12839754#action_12839754 ] 

Ravi Gummadi commented on MAPREDUCE-1455:
-----------------------------------------

Unit tests passed on my local machine(except the known failures of MAPREDUCE-1421 and  MAPREDUCE-1520).
ant test-patch gave:

     [exec] +1 overall.  
     [exec]  
     [exec]     +1 @author.  The patch does not contain any @author tags.
     [exec]  
     [exec]     +1 tests included.  The patch appears to include 11 new or modified tests.
     [exec]  
     [exec]     +1 javadoc.  The javadoc tool did not generate any warning messages.
     [exec]  
     [exec]     +1 javac.  The applied patch does not increase the total number of javac compiler warnings.
     [exec]  
     [exec]     +1 findbugs.  The patch does not introduce any new Findbugs warnings.
     [exec]  
     [exec]     +1 release audit.  The applied patch does not increase the total number of release audit warnings.

> Authorization for servlets
> --------------------------
>
>                 Key: MAPREDUCE-1455
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1455
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: jobtracker, security, tasktracker
>            Reporter: Devaraj Das
>            Assignee: Ravi Gummadi
>             Fix For: 0.22.0
>
>         Attachments: 1455.20S.2.fix.patch, 1455.20S.2.patch, 1455.patch, 1455.v1.patch, 1455.v2.patch, 1455.v3.patch, 1455.v4.1.patch, 1455.v4.2.patch, 1455.v4.patch
>
>
> This jira is about building the authorization for servlets (on top of MAPREDUCE-1307). That is, the JobTracker/TaskTracker runs authorization checks on web requests based on the configured job permissions. For e.g., if the job permission is 600, then no one except the authenticated user can look at the job details via the browser. The authenticated user in the servlet can be obtained using the HttpServletRequest method.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.