[
https://issues.apache.org/jira/browse/OOZIE-228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13217684#comment-13217684
]
[email protected] commented on OOZIE-228:
-----------------------------------------------------
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/4073/
-----------------------------------------------------------
Review request for oozie.
Summary
-------
Using an ACL model identical to hadoop.
supporting the old group authorization model for backwards compatibility
This addresses bug OOZIE-228.
https://issues.apache.org/jira/browse/OOZIE-228
Diffs
-----
trunk/client/src/main/java/org/apache/oozie/client/CoordinatorJob.java
1294392
trunk/client/src/main/java/org/apache/oozie/client/Job.java 1294392
trunk/client/src/main/java/org/apache/oozie/client/OozieClient.java 1294392
trunk/client/src/main/java/org/apache/oozie/client/WorkflowJob.java 1294392
trunk/client/src/main/java/org/apache/oozie/client/rest/JsonTags.java 1294392
trunk/client/src/main/java/org/apache/oozie/client/rest/JsonToBean.java
1294392
trunk/core/src/main/java/org/apache/oozie/action/hadoop/JavaActionExecutor.java
1294392
trunk/core/src/main/java/org/apache/oozie/client/rest/JsonBundleJob.java
1294392
trunk/core/src/main/java/org/apache/oozie/client/rest/JsonCoordinatorJob.java
1294392
trunk/core/src/main/java/org/apache/oozie/client/rest/JsonWorkflowJob.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/bundle/BundleSubmitXCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/coord/CoordSubmitCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/coord/CoordSubmitXCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/wf/ReRunCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/wf/ReRunXCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/wf/SubmitCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/command/wf/SubmitXCommand.java
1294392
trunk/core/src/main/java/org/apache/oozie/executor/jpa/WorkflowsJobGetJPAExecutor.java
1294392
trunk/core/src/main/java/org/apache/oozie/service/AuthorizationService.java
1294392
trunk/core/src/main/java/org/apache/oozie/service/HadoopAccessorService.java
1294392
trunk/core/src/main/java/org/apache/oozie/service/KerberosHadoopAccessorService.java
1294392
trunk/core/src/main/java/org/apache/oozie/servlet/BaseJobServlet.java 1294392
trunk/core/src/main/java/org/apache/oozie/store/StoreStatusFilter.java
1294392
trunk/core/src/main/java/org/apache/oozie/util/ConfigUtils.java PRE-CREATION
trunk/core/src/main/java/org/apache/oozie/util/JobUtils.java 1294392
trunk/core/src/main/resources/oozie-default.xml 1294392
trunk/core/src/test/java/org/apache/oozie/service/TestAuthorizationService.java
1294392
trunk/core/src/test/java/org/apache/oozie/service/TestHadoopAccessorService.java
1294392
trunk/core/src/test/java/org/apache/oozie/servlet/TestJobsServlet.java
1294392
trunk/core/src/test/java/org/apache/oozie/servlet/TestV1JobsServlet.java
1294392
trunk/docs/src/site/twiki/AG_Install.twiki 1294392
trunk/docs/src/site/twiki/BundleFunctionalSpec.twiki 1294392
trunk/docs/src/site/twiki/CoordinatorFunctionalSpec.twiki 1294392
trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki 1294392
Diff: https://reviews.apache.org/r/4073/diff
Testing
-------
run all test cases successfully against Hadoop 1.0.1
Thanks,
Alejandro
> For authorization we should use the ACL model
> ---------------------------------------------
>
> Key: OOZIE-228
> URL: https://issues.apache.org/jira/browse/OOZIE-228
> Project: Oozie
> Issue Type: Bug
> Reporter: Hadoop QA
> Assignee: Alejandro Abdelnur
>
> Currently job authorization is based on a group (a la FileSystem permissions).
> Instead, we should use ACLs as Hadoop does, the ACL would indicate which
> users/groups are allow to manage the job.
> A job properties would specify via the following property:
> oozie.job.acl=[<USER>|<GROUP>]*
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
