Grant Henke has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/13686 )
Change subject: KUDU-2870: allow super-user to skip authz checks in Checksum ...................................................................... KUDU-2870: allow super-user to skip authz checks in Checksum In order to allow for the Kudu CLI to run a checksum scan (a process which currently doesn't fetch an authz token from the Master), this patch allows Checksum to proceed if the requesting user is a super-user. Testing: - A test is added to run the CLI against a tserver that enforces fine-grained access control. - A new test is added to test the super-user permissions for the Checksum endpoint. Change-Id: I9da21f41702da747a081ab037d75865748d981a8 Reviewed-on: http://gerrit.cloudera.org:8080/13681 Reviewed-by: Alexey Serbin <[email protected]> Tested-by: Kudu Jenkins (cherry picked from commit 2c0161db1117d27bb4c2961901dfc54b76437dc9) Reviewed-on: http://gerrit.cloudera.org:8080/13686 Tested-by: Grant Henke <[email protected]> --- M src/kudu/integration-tests/security-itest.cc M src/kudu/server/server_base.cc M src/kudu/server/server_base.h M src/kudu/tools/kudu-tool-test.cc M src/kudu/tserver/tablet_service.cc 5 files changed, 109 insertions(+), 14 deletions(-) Approvals: Alexey Serbin: Looks good to me, approved Grant Henke: Verified -- To view, visit http://gerrit.cloudera.org:8080/13686 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.10.x Gerrit-MessageType: merged Gerrit-Change-Id: I9da21f41702da747a081ab037d75865748d981a8 Gerrit-Change-Number: 13686 Gerrit-PatchSet: 2 Gerrit-Owner: Andrew Wong <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Grant Henke <[email protected]> Gerrit-Reviewer: Hao Hao <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120)
