[HADOOP-12640] Code Review AccessControlList

• Type: Improvement
• Status: Patch Available
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 3.2.0
• Component/s: security
• Flags: Patch
• Assignee: David Mollitor
• Reporter: David Mollitor
• Created: 14/Dec/15 21:46
• Updated: 26/Feb/20 06:10

Description

After some confusion of my own, in particular with "mapreduce.job.acl-view-job," I have looked over the AccessControlList implementation and cleaned it up and clarified a few points.

1) I added tests to demonstrate the existing behavior of including an asterisk in either the username or the group field, it overrides everything and allows all access.

"user1,user2,user3 *" = all access
"* group1,group2" = all access
"* *" = all access
"* " = all access
" *" = all access

2) General clean-up and simplification

Issue Links

• is related to: HADOOP-15836 Review of AccessControlList