You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@falcon.apache.org by "Raghav Kumar Gautam (JIRA)" <ji...@apache.org> on 2014/12/18 23:18:14 UTC
[jira] [Created] (FALCON-959) Unable to update feed/process acl to
a different user of different group
Raghav Kumar Gautam created FALCON-959:
------------------------------------------
Summary: Unable to update feed/process acl to a different user of different group
Key: FALCON-959
URL: https://issues.apache.org/jira/browse/FALCON-959
Project: Falcon
Issue Type: Bug
Affects Versions: 0.6
Reporter: Raghav Kumar Gautam
Assignee: Balu Vellanki
Fix For: 0.7
We can't update a feed/process acl to a different user of a different group. In this case root user of root group.
Old feed:
{code}
2014-12-10 15:21:01,712 INFO - [pool-4-thread-1:feedAclUpdate] ~ Updating feed:
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e" description="clicks log">
<partitions>
<partition name="country"/>
<partition name="colo"/>
</partitions>
<frequency>minutes(20)</frequency>
<timezone>UTC</timezone>
<late-arrival cut-off="hours(6)"/>
<clusters>
<cluster name="corp-9cc9bf87" type="source">
<validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
<retention limit="months(9000)" action="delete"/>
</cluster>
</clusters>
<locations>
<location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
<location type="stats" path="/projects/falcon/clicksStats"/>
<location type="meta" path="/projects/falcon/clicksMetaData"/>
</locations>
<ACL owner="hrt_qa" group="users" permission="*"/>
<schema location="/schema/clicks" provider="protobuf"/>
<properties>
<property name="field1" value="value1"/>
<property name="field2" value="value2"/>
</properties>
</feed>
(AbstractEntityHelper:424)
{code}
New feed:
{code}
2014-12-10 15:21:01,737 INFO - [pool-4-thread-1:feedAclUpdate] ~ To feed:
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e" description="clicks log">
<partitions>
<partition name="country"/>
<partition name="colo"/>
</partitions>
<frequency>minutes(20)</frequency>
<timezone>UTC</timezone>
<late-arrival cut-off="hours(6)"/>
<clusters>
<cluster name="corp-9cc9bf87" type="source">
<validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
<retention limit="months(9000)" action="delete"/>
</cluster>
</clusters>
<locations>
<location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
<location type="stats" path="/projects/falcon/clicksStats"/>
<location type="meta" path="/projects/falcon/clicksMetaData"/>
</locations>
<ACL owner="root" group="root" permission="*"/>
<schema location="/schema/clicks" provider="protobuf"/>
<properties>
<property name="field1" value="value1"/>
<property name="field2" value="value2"/>
</properties>
</feed>
(AbstractEntityHelper:425)
{code}
Falcon's response:
{code}
2014-12-10 15:21:01,887 INFO - [pool-4-thread-1:feedAclUpdate] ~ The web service response is:
<?xml version="1.0" encoding="UTF-8"?><result>
<status>FAILED</status>
<message>org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: Permission deni\
ed: authenticatedUser=hrt_qa not entity owner=root, entity=raaw-logs16-be6a8b2e, action=submit</message>
</result>
(ServiceResponse:77)
{code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)