[ 
https://issues.apache.org/jira/browse/ATLAS-4306?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ashutosh Mestry updated ATLAS-4306:
-----------------------------------
    Description: 
*Background*

Spooling for messages is enabled for hooks that publish messages to Atlas. This 
is available for hooks that choose to add the following properties:
{code:java}
atlas.hook.spool.enabled=true
atlas.hook.spool.dir=/spool-dir{code}
Once the hook is initialized, the directory is created. The user who creates 
the directory will have read-write permissions to the spool directly.

There are cases where the hook gets initialized with different users. When that 
happen, the directory is accessible to the other user. This causes 
initialization failure and the spooling functionality not to be available to 
the other user.

*Solution(s)*

This problem can be circumvented by making the 2 users be part of the same 
group that will allow for same directory to be present for multiple users. 
Multi-user access is currently supported.

For the scenario, where multiple users are not part of the same group, the 
situation described above will come into play. 

_Approach Used_

**No directory exists, _User1_ first creates the directory specified in the 
configuration.

Directory exists, _User1_ has access to the directory and spooling is enabled.

Directory exists, _User2_ does not have access to the directory. New directory 
with username suffixed to the existing directory name is created. The directory 
created for the user will be

 
{code:java}
/spool-dir-User1 
{code}
 

  was:
*Background*

Spooling for messages is enabled for hooks that publish messages to Atlas. This 
is available for hooks that choose to add the following properties:

_atlas.hook.spool.enabled=true_
_atlas.hook.spool.dir=/spool-dir_

Once the hook is initialized, the directory is created. The user who creates 
the directory will have read-write permissions to the spool directly.

There are cases where the hook gets initialized with different users. When that 
happen, the directory is accessible to the other user. This causes 
initialization failure and the spooling functionality not to be available to 
the other user.

*Solution(s)*

This problem can be circumvented by making the 2 users be part of the same 
group that will allow for same directory to be present for multiple users. 
Multi-user access is currently supported.

For the scenario, where multiple users are not part of the same group, the 
situation described above will come into play. 

_Approach Used_

**No directory exists, _User1_ first creates the directory specified in the 
configuration.

Directory exists, _User1_ has access to the directory and spooling is enabled.

Directory exists, _User2_ does not have access to the directory. New directory 
with username suffixed to the existing directory name is created.

 


> Atlas Spooling: Support for User-specific Spool Directory
> ---------------------------------------------------------
>
>                 Key: ATLAS-4306
>                 URL: https://issues.apache.org/jira/browse/ATLAS-4306
>             Project: Atlas
>          Issue Type: Bug
>            Reporter: Ashutosh Mestry
>            Assignee: Ashutosh Mestry
>            Priority: Major
>
> *Background*
> Spooling for messages is enabled for hooks that publish messages to Atlas. 
> This is available for hooks that choose to add the following properties:
> {code:java}
> atlas.hook.spool.enabled=true
> atlas.hook.spool.dir=/spool-dir{code}
> Once the hook is initialized, the directory is created. The user who creates 
> the directory will have read-write permissions to the spool directly.
> There are cases where the hook gets initialized with different users. When 
> that happen, the directory is accessible to the other user. This causes 
> initialization failure and the spooling functionality not to be available to 
> the other user.
> *Solution(s)*
> This problem can be circumvented by making the 2 users be part of the same 
> group that will allow for same directory to be present for multiple users. 
> Multi-user access is currently supported.
> For the scenario, where multiple users are not part of the same group, the 
> situation described above will come into play. 
> _Approach Used_
> **No directory exists, _User1_ first creates the directory specified in the 
> configuration.
> Directory exists, _User1_ has access to the directory and spooling is enabled.
> Directory exists, _User2_ does not have access to the directory. New 
> directory with username suffixed to the existing directory name is created. 
> The directory created for the user will be
>  
> {code:java}
> /spool-dir-User1 
> {code}
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to