[
https://issues.apache.org/jira/browse/HADOOP-10654?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Benoy Antony updated HADOOP-10654:
----------------------------------
Attachment: HADOOP-10654.patch
The attached patch enables one to plugin a different implementation for
_ServiceAuthorizationManager_.
A new interface _ServiceAuthorizationManager_ defined. Existing
_ServiceAuthorizationManager_ is renamed to
_DefaultServiceAuthorizationManager_ and implements
_ServiceAuthorizationManager_.
A new configuration - _hadoop.security.service.authorization.manager.class_ is
defined to specify the custom implementation of _ServiceAuthorizationManager_.
A new class _ServiceAuthorizationManagerFactory_ is defined to create an
instance of _ServiceAuthorizationManager_ based on configuration.
_ServiceLevelAuth_ documentation is updated with this new ability and test
cases are added.
> Support pluggable mechanism to specify Service Authorization
> ------------------------------------------------------------
>
> Key: HADOOP-10654
> URL: https://issues.apache.org/jira/browse/HADOOP-10654
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: security
> Reporter: Benoy Antony
> Assignee: Benoy Antony
> Attachments: HADOOP-10654.patch
>
>
> The service authorization can be specified via hadoop-policy.xml for
> different services(protocols) using ACLS ( list of users and groups) . The
> other subtasks will improve the standard behavior.
> In some case, further special handling is required to restrict access based
> on few other external characteristics of the user for special clusters. Such
> special authorization requirements can be met if it is possible to plugin
> authorization mechanisms at this point.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
