You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-issues@hadoop.apache.org by "Vinod Kumar Vavilapalli (Created) (JIRA)" <ji...@apache.org> on 2011/09/27 07:55:12 UTC
[jira] [Created] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Implement Job ACLs for MRAppMaster
----------------------------------
Key: MAPREDUCE-3103
URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
Project: Hadoop Map/Reduce
Issue Type: Sub-task
Reporter: Vinod Kumar Vavilapalli
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13141158#comment-13141158 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Mapreduce-trunk #884 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk/884/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev)
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195761
Files :
* /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140818#comment-13140818 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Hdfs-trunk-Commit #1292 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/1292/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev)
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195761
Files :
* /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140867#comment-13140867 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Mapreduce-0.23-Commit #129 (See [https://builds.apache.org/job/Hadoop-Mapreduce-0.23-Commit/129/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev) - Merging r1195761 from trunk.
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195763
Files :
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Arun C Murthy (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arun C Murthy updated MAPREDUCE-3103:
-------------------------------------
Priority: Blocker (was: Major)
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: security
> Reporter: Vinod Kumar Vavilapalli
> Priority: Blocker
> Fix For: 0.23.0
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar updated MAPREDUCE-3103:
-------------------------------------
Attachment: MAPREDUCE-3103.patch
Updated patch with throwing a RunTimeException.
Thanks for testing the patch Bobby. Testing this was probably more work than the patch :).
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13141124#comment-13141124 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Hdfs-trunk #850 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/850/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev)
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195761
Files :
* /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar updated MAPREDUCE-3103:
-------------------------------------
Attachment: MAPREDUCE-3103.patch
Looking at the current authentication, the job acl checks in MRAppMaster are no longer necessary since the clients go through acl checks with the RM to get the clientToken.
This patch adds, acl checks in the MRApp Web UI and history server webui.
The history server RPC already does the necessary acl checks.
We need to test the patch on a secure cluster with some web authentication to verify the acl checks in the Web UI's.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Assigned) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar reassigned MAPREDUCE-3103:
----------------------------------------
Assignee: Mahadev konar (was: Vinod Kumar Vavilapalli)
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar updated MAPREDUCE-3103:
-------------------------------------
Status: Open (was: Patch Available)
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140855#comment-13140855 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Mapreduce-trunk-Commit #1239 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1239/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev)
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195761
Files :
* /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar updated MAPREDUCE-3103:
-------------------------------------
Status: Patch Available (was: Open)
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar updated MAPREDUCE-3103:
-------------------------------------
Status: Patch Available (was: Open)
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140819#comment-13140819 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Hdfs-0.23-Commit #122 (See [https://builds.apache.org/job/Hadoop-Hdfs-0.23-Commit/122/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev) - Merging r1195761 from trunk.
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195763
Files :
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Arun C Murthy (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arun C Murthy updated MAPREDUCE-3103:
-------------------------------------
Component/s: mrv2
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Priority: Blocker
> Fix For: 0.23.0
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Arun C Murthy (Assigned) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arun C Murthy reassigned MAPREDUCE-3103:
----------------------------------------
Assignee: Vinod Kumar Vavilapalli
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Vinod Kumar Vavilapalli
> Priority: Blocker
> Fix For: 0.23.0
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Arun C Murthy (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140761#comment-13140761 ]
Arun C Murthy commented on MAPREDUCE-3103:
------------------------------------------
+1 lgtm
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140797#comment-13140797 ]
Hadoop QA commented on MAPREDUCE-3103:
--------------------------------------
+1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12501709/MAPREDUCE-3103.patch
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 1 new or modified tests.
+1 javadoc. The javadoc tool did not generate any warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
+1 core tests. The patch passed unit tests in .
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1229//testReport/
Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1229//console
This message is automatically generated.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140389#comment-13140389 ]
Hadoop QA commented on MAPREDUCE-3103:
--------------------------------------
-1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12501574/MAPREDUCE-3103.patch
against trunk revision .
+1 @author. The patch does not contain any @author tags.
-1 tests included. The patch doesn't appear to include any new or modified tests.
Please justify why no new tests are needed for this patch.
Also please list what manual steps were performed to verify this patch.
+1 javadoc. The javadoc tool did not generate any warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
+1 core tests. The patch passed unit tests in .
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1224//testReport/
Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1224//console
This message is automatically generated.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Vinod Kumar Vavilapalli (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13115248#comment-13115248 ]
Vinod Kumar Vavilapalli commented on MAPREDUCE-3103:
----------------------------------------------------
This is the same as the Job ACLs that is currently present in MRV1. We need two ACLs: view-job and modify-job. Note that these are scoped only to the AM level and have no bearing on the YARN platform level access controls. The later is tracked via MAPREDUCE-3104.
They may internally get themselves converted into appropriate ApplicationACLs during app-submission.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: security
> Reporter: Vinod Kumar Vavilapalli
> Fix For: 0.23.0
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140791#comment-13140791 ]
Hadoop QA commented on MAPREDUCE-3103:
--------------------------------------
+1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12501709/MAPREDUCE-3103.patch
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 1 new or modified tests.
+1 javadoc. The javadoc tool did not generate any warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
+1 core tests. The patch passed unit tests in .
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1228//testReport/
Console output: https://builds.apache.org/job/PreCommit-MAPREDUCE-Build/1228//console
This message is automatically generated.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140843#comment-13140843 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Common-trunk-Commit #1216 (See [https://builds.apache.org/job/Hadoop-Common-trunk-Commit/1216/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev)
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195761
Files :
* /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Mahadev konar (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Mahadev konar updated MAPREDUCE-3103:
-------------------------------------
Resolution: Fixed
Hadoop Flags: Reviewed
Status: Resolved (was: Patch Available)
Just committed. Thanks Bobby for the testing!
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140842#comment-13140842 ]
Hudson commented on MAPREDUCE-3103:
-----------------------------------
Integrated in Hadoop-Common-0.23-Commit #121 (See [https://builds.apache.org/job/Hadoop-Common-0.23-Commit/121/])
MAPREDUCE-3103. Implement Job ACLs for MRAppMaster. (mahadev) - Merging r1195761 from trunk.
mahadev : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1195763
Files :
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/CHANGES.txt
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/client/MRClientService.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-app/src/main/java/org/apache/hadoop/mapreduce/v2/app/webapp/AppController.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/CompletedJob.java
* /hadoop/common/branches/branch-0.23/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-hs/src/main/java/org/apache/hadoop/mapreduce/v2/hs/JobHistory.java
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch, MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Robert Joseph Evans (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140739#comment-13140739 ]
Robert Joseph Evans commented on MAPREDUCE-3103:
------------------------------------------------
I filed MAPREDUCE-3320 to provide a better way to handle these types of error conditions in the future.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (MAPREDUCE-3103) Implement Job ACLs for
MRAppMaster
Posted by "Robert Joseph Evans (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/MAPREDUCE-3103?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13140729#comment-13140729 ]
Robert Joseph Evans commented on MAPREDUCE-3103:
------------------------------------------------
The patch appears the check the ACLs correctly, but like other error handling in the WebApps it is not stopping the rest of the page from being rendered. So even thought the result is being set as FORBIDDEN the rest of the code ignores it and goes on to render the rest of the page and overwrite the result. In the short term I would say that you want to throw a RuntimeException inside accessDenied. In the long term we need to create an accessDenied exception, along with several others and have the framework handle them correctly, similar to how Jersey handles it.
> Implement Job ACLs for MRAppMaster
> ----------------------------------
>
> Key: MAPREDUCE-3103
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3103
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: mrv2, security
> Reporter: Vinod Kumar Vavilapalli
> Assignee: Mahadev konar
> Priority: Blocker
> Fix For: 0.23.0
>
> Attachments: MAPREDUCE-3103.patch
>
>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira