[kudu-CR] KUDU-2870: allow super-user to skip authz checks in Checksum

["Andrew Wong (Code Review)" <ge...@cloudera.org>]

Hello Tidy Bot, Mike Percy, Alexey Serbin, Kudu Jenkins, Grant Henke, Hao Hao, 

I'd like you to reexamine a change. Please visit

    http://gerrit.cloudera.org:8080/13681

to look at the new patch set (#5).

Change subject: KUDU-2870: allow super-user to skip authz checks in Checksum
......................................................................

KUDU-2870: allow super-user to skip authz checks in Checksum

In order to allow for the Kudu CLI to run a checksum scan (a process
which currently doesn't fetch an authz token from the Master), this
patch allows Checksum to proceed if the requesting user is a super-user.

Testing:
- A test is added to run the tool against a tserver that enforces
  fine-grained access control as a super-user.
- A new test is added to test the super-user permissions for the
  Checksum endpoint.

Change-Id: I9da21f41702da747a081ab037d75865748d981a8
---
M src/kudu/integration-tests/security-itest.cc
M src/kudu/server/server_base.cc
M src/kudu/server/server_base.h
M src/kudu/tools/kudu-tool-test.cc
M src/kudu/tserver/tablet_server_authorization-test.cc
M src/kudu/tserver/tablet_service.cc
6 files changed, 108 insertions(+), 14 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/81/13681/5
-- 
To view, visit http://gerrit.cloudera.org:8080/13681
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I9da21f41702da747a081ab037d75865748d981a8
Gerrit-Change-Number: 13681
Gerrit-PatchSet: 5
Gerrit-Owner: Andrew Wong <aw...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Andrew Wong <aw...@cloudera.com>
Gerrit-Reviewer: Grant Henke <gr...@apache.org>
Gerrit-Reviewer: Hao Hao <ha...@cloudera.com>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Mike Percy <mp...@apache.org>
Gerrit-Reviewer: Tidy Bot (241)