[HADOOP-10648] Service Authorization Improvements

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 02/Jun/14 01:35
• Updated: 08/Jun/14 16:36

Description

Umbrella jira for a set of improvements on service Authorization

Issue Links

• relates to: HADOOP-10590 ServiceAuthorizationManager is not threadsafe

Sub-Tasks

• Refactor AccessControlList to reuse utility functions and to improve performance: Closed
• Allow overriding the default ACL for service authorization: Closed
• Add ability to specify a reverse ACL (black list) of users and groups: Closed
• Add ability to restrict service access using IP addresses and hostnames: Closed
• Support pluggable mechanism to specify Service Authorization: Open