[
https://issues.apache.org/jira/browse/OOZIE-228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13223906#comment-13223906
]
[email protected] commented on OOZIE-228:
-----------------------------------------------------
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/4073/#review5675
-----------------------------------------------------------
Please add a note for oozie config changes for new or modified ones.
For example,
For backward compatibility,
add oozie.service.AuthorizationService.default.group.as.acl=true
to oozie-site.xml.
- Angelo K.
On 2012-02-27 23:22:42, Alejandro Abdelnur wrote:
bq.
bq. -----------------------------------------------------------
bq. This is an automatically generated e-mail. To reply, visit:
bq. https://reviews.apache.org/r/4073/
bq. -----------------------------------------------------------
bq.
bq. (Updated 2012-02-27 23:22:42)
bq.
bq.
bq. Review request for oozie.
bq.
bq.
bq. Summary
bq. -------
bq.
bq. Using an ACL model identical to hadoop.
bq.
bq. supporting the old group authorization model for backwards compatibility
bq.
bq.
bq. This addresses bug OOZIE-228.
bq. https://issues.apache.org/jira/browse/OOZIE-228
bq.
bq.
bq. Diffs
bq. -----
bq.
bq. trunk/client/src/main/java/org/apache/oozie/client/CoordinatorJob.java
1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/Job.java 1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/OozieClient.java
1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/WorkflowJob.java
1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/rest/JsonTags.java
1294392
bq. trunk/client/src/main/java/org/apache/oozie/client/rest/JsonToBean.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/action/hadoop/JavaActionExecutor.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/client/rest/JsonBundleJob.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/client/rest/JsonCoordinatorJob.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/client/rest/JsonWorkflowJob.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/command/bundle/BundleSubmitXCommand.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/command/coord/CoordSubmitCommand.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/command/coord/CoordSubmitXCommand.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/ReRunCommand.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/ReRunXCommand.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/SubmitCommand.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/command/wf/SubmitXCommand.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/executor/jpa/WorkflowsJobGetJPAExecutor.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/service/AuthorizationService.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/service/HadoopAccessorService.java
1294392
bq.
trunk/core/src/main/java/org/apache/oozie/service/KerberosHadoopAccessorService.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/servlet/BaseJobServlet.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/store/StoreStatusFilter.java
1294392
bq. trunk/core/src/main/java/org/apache/oozie/util/ConfigUtils.java
PRE-CREATION
bq. trunk/core/src/main/java/org/apache/oozie/util/JobUtils.java 1294392
bq. trunk/core/src/main/resources/oozie-default.xml 1294392
bq.
trunk/core/src/test/java/org/apache/oozie/service/TestAuthorizationService.java
1294392
bq.
trunk/core/src/test/java/org/apache/oozie/service/TestHadoopAccessorService.java
1294392
bq. trunk/core/src/test/java/org/apache/oozie/servlet/TestJobsServlet.java
1294392
bq. trunk/core/src/test/java/org/apache/oozie/servlet/TestV1JobsServlet.java
1294392
bq. trunk/docs/src/site/twiki/AG_Install.twiki 1294392
bq. trunk/docs/src/site/twiki/BundleFunctionalSpec.twiki 1294392
bq. trunk/docs/src/site/twiki/CoordinatorFunctionalSpec.twiki 1294392
bq. trunk/docs/src/site/twiki/WorkflowFunctionalSpec.twiki 1294392
bq.
bq. Diff: https://reviews.apache.org/r/4073/diff
bq.
bq.
bq. Testing
bq. -------
bq.
bq. run all test cases successfully against Hadoop 1.0.1
bq.
bq.
bq. Thanks,
bq.
bq. Alejandro
bq.
bq.
> For authorization we should use the ACL model
> ---------------------------------------------
>
> Key: OOZIE-228
> URL: https://issues.apache.org/jira/browse/OOZIE-228
> Project: Oozie
> Issue Type: Bug
> Reporter: Hadoop QA
> Assignee: Alejandro Abdelnur
> Fix For: 3.2.0
>
>
> Currently job authorization is based on a group (a la FileSystem permissions).
> Instead, we should use ACLs as Hadoop does, the ACL would indicate which
> users/groups are allow to manage the job.
> A job properties would specify via the following property:
> oozie.job.acl=[<USER>|<GROUP>]*
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
