You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@oozie.apache.org by "jiraposter@reviews.apache.org (Commented) (JIRA)" <ji...@apache.org> on 2012/03/01 20:38:07 UTC
[jira] [Commented] (OOZIE-228) For authorization we should use the
ACL model
[ https://issues.apache.org/jira/browse/OOZIE-228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13220285#comment-13220285 ]
jiraposter@reviews.apache.org commented on OOZIE-228:
-----------------------------------------------------
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/4073/#review5512
-----------------------------------------------------------
Ship it!
+1 Looks good
- Mayank
On 2012-02-27 23:22:42, Alejandro Abdelnur wrote:
bq.
bq. -----------------------------------------------------------
bq. This is an automatically generated e-mail. To reply, visit:
bq. https://reviews.apache.org/r/4073/
bq. -----------------------------------------------------------
bq.
bq. (Updated 2012-02-27 23:22:42)
bq.
bq.
bq. Review request for oozie.
bq.
bq.
bq. Summary
bq. -------
bq.
bq. Using an ACL model identical to hadoop.
bq.
bq. supporting the old group authorization model for backwards compatibility
bq.
bq.
bq. This addresses bug OOZIE-228.
bq. https://issues.apache.org/jira/browse/OOZIE-228
bq.
bq.
bq. Diffs
bq. -----
bq.
bq. trunk/client/src/main/java/org/apache/oozie/client/CoordinatorJob.java 1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/Job.java 1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/OozieClient.java 1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/WorkflowJob.java 1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/rest/JsonTags.java 1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/rest/JsonToBean.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/action/hadoop/JavaActionExecutor.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/client/rest/JsonBundleJob.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/client/rest/JsonCoordinatorJob.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/client/rest/JsonWorkflowJob.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/bundle/BundleSubmitXCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/coord/CoordSubmitCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/coord/CoordSubmitXCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/ReRunCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/ReRunXCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/SubmitCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/SubmitXCommand.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/executor/jpa/WorkflowsJobGetJPAExecutor.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/service/AuthorizationService.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/service/HadoopAccessorService.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/service/KerberosHadoopAccessorService.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/servlet/BaseJobServlet.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/store/StoreStatusFilter.java 1294392
bq. trunk/core/src/main/java/org/apache/oozie/util/ConfigUtils.java PRE-CREATION
bq. trunk/core/src/main/java/org/apache/oozie/util/JobUtils.java 1294392
bq. trunk/core/src/main/resources/oozie-default.xml 1294392
bq. trunk/core/src/test/java/org/apache/oozie/service/TestAuthorizationService.java 1294392
bq. trunk/core/src/test/java/org/apache/oozie/service/TestHadoopAccessorService.java 1294392
bq. trunk/core/src/test/java/org/apache/oozie/servlet/TestJobsServlet.java 1294392
bq. trunk/core/src/test/java/org/apache/oozie/servlet/TestV1JobsServlet.java 1294392
bq. trunk/docs/src/site/twiki/AG_Install.twiki 1294392
bq. trunk/docs/src/site/twiki/BundleFunctionalSpec.twiki 1294392
bq. trunk/docs/src/site/twiki/CoordinatorFunctionalSpec.twiki 1294392
bq. trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki 1294392
bq.
bq. Diff: https://reviews.apache.org/r/4073/diff
bq.
bq.
bq. Testing
bq. -------
bq.
bq. run all test cases successfully against Hadoop 1.0.1
bq.
bq.
bq. Thanks,
bq.
bq. Alejandro
bq.
bq.
> For authorization we should use the ACL model
> ---------------------------------------------
>
> Key: OOZIE-228
> URL: https://issues.apache.org/jira/browse/OOZIE-228
> Project: Oozie
> Issue Type: Bug
> Reporter: Hadoop QA
> Assignee: Alejandro Abdelnur
>
> Currently job authorization is based on a group (a la FileSystem permissions).
> Instead, we should use ACLs as Hadoop does, the ACL would indicate which users/groups are allow to manage the job.
> A job properties would specify via the following property:
> oozie.job.acl=[<USER>|<GROUP>]*
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira