[
https://issues.apache.org/jira/browse/TEZ-671?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14090092#comment-14090092
]
Siddharth Seth commented on TEZ-671:
------------------------------------
Comments on the patch:
- getACLManager should make use of getDAG - instead of replicating it
- Oleg had a comment about getting the ugi being repeated everywhere
- Are any changes required on the creation of the ApplicationSubmissionContext
to set the AM ACLs for YARN
- How to DAGs supply ACLs. Do we need a method on the DAG API for this. In,
which case, the DAG specific config parameters are likely not required.
- Anything needed in terms of ATS, or will that be a separate patch.
- Ideally, when using the SimpleHistoryLoggingService - we could use HDFS ACLs
to give access specific AM logs, but this would be a follow up. For now, this
will be created using the AM credentials correct ?, which should be accessible
to the app submitter, but may not be accessible to individual DAGs
- In terms of Group, AclManager etc - a lot of this is from Hadoop as
LimitedPrivate("mapreduce"). I'm guessing that's in Tez as well to avoid
potential changes in Hadoop. Would be much better if we could just depend on
that code instead of having to create a copy.
> Support View/Modify ACLs for DAGs
> ---------------------------------
>
> Key: TEZ-671
> URL: https://issues.apache.org/jira/browse/TEZ-671
> Project: Apache Tez
> Issue Type: Sub-task
> Reporter: Siddharth Seth
> Assignee: Hitesh Shah
> Attachments: TEZ-671.2.patch
>
>
--
This message was sent by Atlassian JIRA
(v6.2#6252)
