Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-12640

Code Review AccessControlList

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Patch Available
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 3.2.0
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None
    • Flags:
      Patch

      Description

      After some confusion of my own, in particular with "mapreduce.job.acl-view-job," I have looked over the AccessControlList implementation and cleaned it up and clarified a few points.

      1) I added tests to demonstrate the existing behavior of including an asterisk in either the username or the group field, it overrides everything and allows all access.

      "user1,user2,user3 *" = all access
      "* group1,group2" = all access
      "* *" = all access
      "* " = all access
      " *" = all access

      2) General clean-up and simplification

        Attachments

        1. AccessControlList.patch
          28 kB
          David Mollitor
        2. AccessControlList.patch
          28 kB
          David Mollitor
        3. HADOOP-12640.1.patch
          8 kB
          David Mollitor

          Issue Links

            Activity

              People

              • Assignee:
                belugabehr David Mollitor
                Reporter:
                belugabehr David Mollitor
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated: