[jira] [Updated] (AURORA-1187) Create JobKey-scoped Permissions and apply to AuroraSchedulerManager

["Kevin Sweeney (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AURORA-1187?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kevin Sweeney updated AURORA-1187:
----------------------------------
    Assignee: Kevin Sweeney

> Create JobKey-scoped Permissions and apply to AuroraSchedulerManager
> --------------------------------------------------------------------
>
>                 Key: AURORA-1187
>                 URL: https://issues.apache.org/jira/browse/AURORA-1187
>             Project: Aurora
>          Issue Type: Story
>          Components: Scheduler, Security
>            Reporter: Kevin Sweeney
>            Assignee: Kevin Sweeney
>
> https://reviews.apache.org/r/31820/ added support for coarse-grained permissions based on the thrift API method name. Support finer-grained permissions scoped down to the job
> For example calls to against
> {code}
> auroraSchedulerManager.descheduleCronJob(JobKey(role='ksweeney', environment='prod', name='download_lunch_menu'), None, None)
> {code}
> currently check for the {{thrift.AuroraSchedulerManager:descheduleCronJob
> }} Permission when they should check for the {{thrift.AuroraSchedulerManager:descheduleCronJob:ksweeney:prod:download_lunch_menu}} Permission.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)