Bankim Bhavsar has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/17517 )
Change subject: [txn_manager] allow a super user to call txn-related RPCs ...................................................................... [txn_manager] allow a super user to call txn-related RPCs Since we are planning to use transactional operations in kudu CLI tools (e.g., in 'kudu perf loadgen'), it makes sense to allow txn-related RPCs to be invoked by a super user as well since some kudu CLI tools are often run under such credentials. This patch changes the RPC-level coarse authz settings for all methods in the TxnManagerService accordingly. I also had a version of this patch where a service user was able to call txn API as well, but it turned out that TabletServerService API isn't accessible to service users, e.g. TabletServerService::Write() is accessible only to regular and super users. With that, I don't quite see the necessity of allowing a service user to call txn API. Change-Id: I21e4b29634fd01f0ced80b54373b1ce156e274ad Reviewed-on: http://gerrit.cloudera.org:8080/17510 Tested-by: Alexey Serbin <[email protected]> Reviewed-by: Andrew Wong <[email protected]> (cherry picked from commit bf7a9535a264c7579bd783a7136bf3becb1a37a9) Reviewed-on: http://gerrit.cloudera.org:8080/17517 Reviewed-by: Bankim Bhavsar <[email protected]> Tested-by: Kudu Jenkins --- M src/kudu/integration-tests/security-itest.cc M src/kudu/master/txn_manager_service.cc 2 files changed, 106 insertions(+), 17 deletions(-) Approvals: Bankim Bhavsar: Looks good to me, approved Kudu Jenkins: Verified -- To view, visit http://gerrit.cloudera.org:8080/17517 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.15.x Gerrit-MessageType: merged Gerrit-Change-Id: I21e4b29634fd01f0ced80b54373b1ce156e274ad Gerrit-Change-Number: 17517 Gerrit-PatchSet: 2 Gerrit-Owner: Alexey Serbin <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Bankim Bhavsar <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120)
