[ 
https://issues.apache.org/jira/browse/OOZIE-1376?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13656979#comment-13656979
 ] 

Dapeng Sun commented on OOZIE-1376:
-----------------------------------

Kai I would like to help with this. A patch was just submitted. Thanks.
                
> Extending Oozie ACLs like admin groups and proxy users to support both groups 
> and users
> ---------------------------------------------------------------------------------------
>
>                 Key: OOZIE-1376
>                 URL: https://issues.apache.org/jira/browse/OOZIE-1376
>             Project: Oozie
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: trunk
>            Reporter: Kai Zheng
>            Assignee: Kai Zheng
>              Labels: Security
>             Fix For: trunk
>
>         Attachments: OOZIE-1376.patch
>
>
> Currently Oozie relevant ACLs supports only users in some case or only groups 
> in other case, which is not consistent with other components like Hadoop, 
> HBase and Hive. Supporting both users and groups in ACLs can simplify the 
> admin configuration work, and also help implement more advanced access 
> control such as RBAC based on the ACLs scheme. For example RBAC can simply 
> translate role privilege into corresponding ACLs with the users and groups 
> assigned to the role.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to