[AURORA-1187] Create JobKey-scoped Permissions and apply to AuroraSchedulerManager

• Type: Story
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.8.0
• Component/s: Scheduler, Security
• Epic Link: Scheduler Security
• Sprint: Twitter Aurora Q1'15 Sprint 5, Twitter Aurora Q1'15 Sprint 6
• Story Points: 5
• Assignee: Kevin Sweeney
• Reporter: Kevin Sweeney
• Created: 10/Mar/15 23:54
• Updated: 03/Apr/15 21:20
• Resolved: 03/Apr/15 21:20

Description

https://reviews.apache.org/r/31820/ added support for coarse-grained permissions based on the thrift API method name. Support finer-grained permissions scoped down to the job

For example calls to

auroraSchedulerManager.descheduleCronJob(JobKey(role='ksweeney', environment='prod', name='download_lunch_menu'), None, None)

currently check for the thrift.AuroraSchedulerManager:descheduleCronJob Permission when they should check for the thrift.AuroraSchedulerManager:descheduleCronJob:ksweeney:prod:download_lunch_menu Permission.

Issue Links

• blocks: AURORA-904 0.8.0 Release Candidate