[FALCON-959] Unable to update feed/process acl to a different user of different group

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 0.6
• Fix Version/s: 0.7
• Assignee: Balu Vellanki
• Reporter: Raghav Kumar Gautam
• Created: 18/Dec/14 22:17
• Updated: 17/Jul/15 01:06
• Resolved: 17/Jul/15 01:06

Description

We can't update a feed/process acl to a different user of a different group. In this case root user of root group.

Old feed:

2014-12-10 15:21:01,712 INFO  - [pool-4-thread-1:feedAclUpdate] ~ Updating feed:
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e" description="clicks log">
    <partitions>
        <partition name="country"/>
        <partition name="colo"/>
    </partitions>
    <frequency>minutes(20)</frequency>
    <timezone>UTC</timezone>
    <late-arrival cut-off="hours(6)"/>
    <clusters>
        <cluster name="corp-9cc9bf87" type="source">
            <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
            <retention limit="months(9000)" action="delete"/>
        </cluster>
    </clusters>
    <locations>
        <location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
        <location type="stats" path="/projects/falcon/clicksStats"/>
        <location type="meta" path="/projects/falcon/clicksMetaData"/>
    </locations>
    <ACL owner="hrt_qa" group="users" permission="*"/>
    <schema location="/schema/clicks" provider="protobuf"/>
    <properties>
        <property name="field1" value="value1"/>
        <property name="field2" value="value2"/>
    </properties>
</feed>
 (AbstractEntityHelper:424)

New feed:

2014-12-10 15:21:01,737 INFO  - [pool-4-thread-1:feedAclUpdate] ~ To feed:
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e" description="clicks log">
    <partitions>
        <partition name="country"/>
        <partition name="colo"/>
    </partitions>
    <frequency>minutes(20)</frequency>
    <timezone>UTC</timezone>
    <late-arrival cut-off="hours(6)"/>
    <clusters>
        <cluster name="corp-9cc9bf87" type="source">
            <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
            <retention limit="months(9000)" action="delete"/>
        </cluster>
    </clusters>
    <locations>
        <location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
        <location type="stats" path="/projects/falcon/clicksStats"/>
        <location type="meta" path="/projects/falcon/clicksMetaData"/>
    </locations>
    <ACL owner="root" group="root" permission="*"/>
    <schema location="/schema/clicks" provider="protobuf"/>
    <properties>
        <property name="field1" value="value1"/>
        <property name="field2" value="value2"/>
    </properties>
</feed>
 (AbstractEntityHelper:425)

Falcon's response:

2014-12-10 15:21:01,887 INFO  - [pool-4-thread-1:feedAclUpdate] ~ The web service response is:
<?xml version="1.0" encoding="UTF-8"?><result>
  <status>FAILED</status>
  <message>org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: Permission deni\
ed: authenticatedUser=hrt_qa not entity owner=root, entity=raaw-logs16-be6a8b2e, action=submit</message>
</result>
 (ServiceResponse:77)