[
https://issues.apache.org/jira/browse/MAPREDUCE-2473?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13029129#comment-13029129
]
Aaron T. Myers commented on MAPREDUCE-2473:
-------------------------------------------
{quote}
It seems unfortunate that we're lumping in the "getGroups" API (an action
intended for non-admin usage) with the refresh methods (admin actions).
Unfortunately the ACLs for this whole Protocol are determined by
"security.refresh.user.mappings.protocol.acl" which is a misnomer when it also
affects the group command.
Any thoughts on a way around this?
{quote}
Certainly. We could have a separate protocol interface for refreshing versus
fetching user group mappings. It seemed logical to me to lump the two together,
since they both cover user -> group mapping, but I don't feel very strongly
about this.
> MR portion of HADOOP-7214 - Hadoop /usr/bin/groups equivalent
> -------------------------------------------------------------
>
> Key: MAPREDUCE-2473
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-2473
> Project: Hadoop Map/Reduce
> Issue Type: New Feature
> Components: jobtracker
> Affects Versions: 0.23.0
> Reporter: Aaron T. Myers
> Assignee: Aaron T. Myers
> Fix For: 0.23.0
>
> Attachments: mapreduce-2473.0.patch
>
>
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
