[
https://issues.apache.org/jira/browse/OOZIE-1376?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13656979#comment-13656979
]
Dapeng Sun commented on OOZIE-1376:
-----------------------------------
Kai I would like to help with this. A patch was just submitted. Thanks.
> Extending Oozie ACLs like admin groups and proxy users to support both groups
> and users
> ---------------------------------------------------------------------------------------
>
> Key: OOZIE-1376
> URL: https://issues.apache.org/jira/browse/OOZIE-1376
> Project: Oozie
> Issue Type: Improvement
> Components: security
> Affects Versions: trunk
> Reporter: Kai Zheng
> Assignee: Kai Zheng
> Labels: Security
> Fix For: trunk
>
> Attachments: OOZIE-1376.patch
>
>
> Currently Oozie relevant ACLs supports only users in some case or only groups
> in other case, which is not consistent with other components like Hadoop,
> HBase and Hive. Supporting both users and groups in ACLs can simplify the
> admin configuration work, and also help implement more advanced access
> control such as RBAC based on the ACLs scheme. For example RBAC can simply
> translate role privilege into corresponding ACLs with the users and groups
> assigned to the role.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira