[
https://issues.apache.org/jira/browse/FALCON-959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Balu Vellanki resolved FALCON-959.
----------------------------------
Resolution: Not A Problem
It is correct behavior that Falcon does not allow change of ACL to a different
user and different group. HDFS does not allow this behavior either.
> Unable to update feed/process acl to a different user of different group
> ------------------------------------------------------------------------
>
> Key: FALCON-959
> URL: https://issues.apache.org/jira/browse/FALCON-959
> Project: Falcon
> Issue Type: Bug
> Affects Versions: 0.6
> Reporter: Raghav Kumar Gautam
> Assignee: Balu Vellanki
> Fix For: 0.7
>
>
> We can't update a feed/process acl to a different user of a different group.
> In this case root user of root group.
> Old feed:
> {code}
> 2014-12-10 15:21:01,712 INFO - [pool-4-thread-1:feedAclUpdate] ~ Updating
> feed:
> <?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1"
> name="raaw-logs16-be6a8b2e" description="clicks log">
> <partitions>
> <partition name="country"/>
> <partition name="colo"/>
> </partitions>
> <frequency>minutes(20)</frequency>
> <timezone>UTC</timezone>
> <late-arrival cut-off="hours(6)"/>
> <clusters>
> <cluster name="corp-9cc9bf87" type="source">
> <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
> <retention limit="months(9000)" action="delete"/>
> </cluster>
> </clusters>
> <locations>
> <location type="data"
> path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
> <location type="stats" path="/projects/falcon/clicksStats"/>
> <location type="meta" path="/projects/falcon/clicksMetaData"/>
> </locations>
> <ACL owner="hrt_qa" group="users" permission="*"/>
> <schema location="/schema/clicks" provider="protobuf"/>
> <properties>
> <property name="field1" value="value1"/>
> <property name="field2" value="value2"/>
> </properties>
> </feed>
> (AbstractEntityHelper:424)
> {code}
> New feed:
> {code}
> 2014-12-10 15:21:01,737 INFO - [pool-4-thread-1:feedAclUpdate] ~ To feed:
> <?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1"
> name="raaw-logs16-be6a8b2e" description="clicks log">
> <partitions>
> <partition name="country"/>
> <partition name="colo"/>
> </partitions>
> <frequency>minutes(20)</frequency>
> <timezone>UTC</timezone>
> <late-arrival cut-off="hours(6)"/>
> <clusters>
> <cluster name="corp-9cc9bf87" type="source">
> <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
> <retention limit="months(9000)" action="delete"/>
> </cluster>
> </clusters>
> <locations>
> <location type="data"
> path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
> <location type="stats" path="/projects/falcon/clicksStats"/>
> <location type="meta" path="/projects/falcon/clicksMetaData"/>
> </locations>
> <ACL owner="root" group="root" permission="*"/>
> <schema location="/schema/clicks" provider="protobuf"/>
> <properties>
> <property name="field1" value="value1"/>
> <property name="field2" value="value2"/>
> </properties>
> </feed>
> (AbstractEntityHelper:425)
> {code}
> Falcon's response:
> {code}
> 2014-12-10 15:21:01,887 INFO - [pool-4-thread-1:feedAclUpdate] ~ The web
> service response is:
> <?xml version="1.0" encoding="UTF-8"?><result>
> <status>FAILED</status>
> <message>org.apache.hadoop.security.authorize.AuthorizationException:
> org.apache.hadoop.security.authorize.AuthorizationException:
> org.apache.hadoop.security.authorize.AuthorizationException: Permission deni\
> ed: authenticatedUser=hrt_qa not entity owner=root,
> entity=raaw-logs16-be6a8b2e, action=submit</message>
> </result>
> (ServiceResponse:77)
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
