[
https://issues.apache.org/jira/browse/SQOOP-3018?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15586807#comment-15586807
]
Abraham Fine commented on SQOOP-3018:
-------------------------------------
Hello [~daryn]-
The credentials are not necessarily owned by the user (lets say that a DBA
creates a link and then a user creates a job using that link).
How will the user be able to provide custom job code and alter the classpath?
The only thing I can think of is providing a malicious jdbc driver when
creating a link.
> Hadoop MapReduce job submission be done in client user UGI?
> -----------------------------------------------------------
>
> Key: SQOOP-3018
> URL: https://issues.apache.org/jira/browse/SQOOP-3018
> Project: Sqoop
> Issue Type: New Feature
> Components: connectors/hdfs
> Affects Versions: 1.99.7
> Reporter: Yan Braun
> Attachments: SQOOP-3018.patch
>
>
> Hdfs Connector read and write to HDFS in client user UGI when proxyUser is
> enabled. But MapReduce job submission is done using Sqoop user UGI, which
> makes all jobs from different users run in Sqoop user's hadoop queue instead
> of client users' own queue.
> This is a follow-up JIRA after our discussions with Abraham Fine on whether
> this will be on sqoop2 road map in the near future. Thanks.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
