[ 
https://issues.apache.org/jira/browse/OOZIE-1498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13745099#comment-13745099
 ] 

Robert Kanter commented on OOZIE-1498:
--------------------------------------

The default settings are more suited towards developers; there are many 
properties that actual users should tweak to be more appropriate for "real" use 
-- this is just one of them.  I think we should leave it as false.  Perhaps a 
better approach would be to add some general documentation on recommended 
settings that users should use or something like that.  
                
> Any user is allowed to manage job not as owner
> ----------------------------------------------
>
>                 Key: OOZIE-1498
>                 URL: https://issues.apache.org/jira/browse/OOZIE-1498
>             Project: Oozie
>          Issue Type: Bug
>            Reporter: Eugene Shevchuk
>            Assignee: Eugene Shevchuk
>         Attachments: OOZIE-1498.patch
>
>
> By default oozie.service.AuthorizationService.security.enabled option is 
> disabled so any user can manage any job. I think that it's not good that not 
> only owner can manage job he has created and started (anyone can kill or 
> pause it). Now it's enabled by default.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to