You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@falcon.apache.org by ve...@apache.org on 2014/08/08 19:43:48 UTC
[9/9] git commit: FALCON-400 Add Authorization for Entities.
Contributed by Venkatesh Seetharam
FALCON-400 Add Authorization for Entities. Contributed by Venkatesh Seetharam
Project: http://git-wip-us.apache.org/repos/asf/incubator-falcon/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-falcon/commit/c4de9eca
Tree: http://git-wip-us.apache.org/repos/asf/incubator-falcon/tree/c4de9eca
Diff: http://git-wip-us.apache.org/repos/asf/incubator-falcon/diff/c4de9eca
Branch: refs/heads/master
Commit: c4de9eca72c621f544e5cf39861ff08d1ad83cc0
Parents: 84cc368
Author: Venkatesh Seetharam <ve...@apache.org>
Authored: Fri Aug 8 10:43:13 2014 -0700
Committer: Venkatesh Seetharam <ve...@apache.org>
Committed: Fri Aug 8 10:43:13 2014 -0700
----------------------------------------------------------------------
CHANGES.txt | 8 ++++++++
.../apache/falcon/security/DefaultAuthorizationProvider.java | 2 +-
.../oozie/process/OozieProcessWorkflowBuilderTest.java | 2 +-
3 files changed, 10 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-falcon/blob/c4de9eca/CHANGES.txt
----------------------------------------------------------------------
diff --git a/CHANGES.txt b/CHANGES.txt
index d090789..a0f9275 100755
--- a/CHANGES.txt
+++ b/CHANGES.txt
@@ -5,6 +5,14 @@ Trunk (Unreleased)
INCOMPATIBLE CHANGES
NEW FEATURES
+ FALCON-400 Add Authorization for Entities (Venkatesh Seetharam)
+ FALCON-279 Add ACL for Cluster Entity
+ FALCON-462 Add ACL for process entity
+ FALCON-463 Validate Feed ACL only if authorization is enabled
+ FALCON-464 Enforce Authorization for REST API
+ FALCON-468 Add User Documentation for authorization feature
+ FALCON-557 Add super-user who is authorized for all
+
FALCON-263 API to get workflow parameters. (pavan kumar kolamuri via Shwetha GS)
IMPROVEMENTS
http://git-wip-us.apache.org/repos/asf/incubator-falcon/blob/c4de9eca/common/src/main/java/org/apache/falcon/security/DefaultAuthorizationProvider.java
----------------------------------------------------------------------
diff --git a/common/src/main/java/org/apache/falcon/security/DefaultAuthorizationProvider.java b/common/src/main/java/org/apache/falcon/security/DefaultAuthorizationProvider.java
index c7e87f4..e90518d 100644
--- a/common/src/main/java/org/apache/falcon/security/DefaultAuthorizationProvider.java
+++ b/common/src/main/java/org/apache/falcon/security/DefaultAuthorizationProvider.java
@@ -182,7 +182,7 @@ public class DefaultAuthorizationProvider implements AuthorizationProvider {
if (isSuperUser(proxyUgi)) {
return;
}
-
+
checkUser(entityName, acl.getOwner(), acl.getGroup(), action, authenticatedUser, proxyUgi);
}
http://git-wip-us.apache.org/repos/asf/incubator-falcon/blob/c4de9eca/oozie/src/test/java/org/apache/falcon/oozie/process/OozieProcessWorkflowBuilderTest.java
----------------------------------------------------------------------
diff --git a/oozie/src/test/java/org/apache/falcon/oozie/process/OozieProcessWorkflowBuilderTest.java b/oozie/src/test/java/org/apache/falcon/oozie/process/OozieProcessWorkflowBuilderTest.java
index 14759e0..ffcc88a 100644
--- a/oozie/src/test/java/org/apache/falcon/oozie/process/OozieProcessWorkflowBuilderTest.java
+++ b/oozie/src/test/java/org/apache/falcon/oozie/process/OozieProcessWorkflowBuilderTest.java
@@ -632,7 +632,7 @@ public class OozieProcessWorkflowBuilderTest extends AbstractTestBase {
String coordPath = bundle.getCoordinator().get(0).getAppPath().replace("${nameNode}", "");
List<CONFIGURATION.Property> props = bundle.getCoordinator().get(0).getConfiguration().getProperty();
for (CONFIGURATION.Property prop : props) {
- if(prop.getName().equals("oozie.libpath")) {
+ if (prop.getName().equals("oozie.libpath")) {
Assert.assertEquals(prop.getValue().replace("${nameNode}", ""), new Path(bundlePath,
"userlib").toString());
}