[MAPREDUCE-1307] Introduce the concept of Job Permissions

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.21.0
• Component/s: security
• Hadoop Flags: Incompatible change, Reviewed

Release Note

Added job-level authorization to MapReduce. JobTracker will now use the cluster configuration "mapreduce.cluster.job-authorization-enabled" to enable the checks to verify the authority of access of jobs where ever needed. Introduced two job-configuration properties to specify ACLs: "mapreduce.job.acl-view-job" and "mapreduce.job.acl-modify-job". For now, RPCs related to job-level counters, task-level counters and tasks' diagnostic information are protected by "mapreduce.job.acl-view-job" ACL. "mapreduce.job.acl-modify-job" protects killing of a job, killing a task of a job, failing a task of a job and setting the priority of a job. Irrespective of the above two ACLs, job-owner, superuser and members of supergroup configured on JobTracker via mapred.permissions.supergroup, can do all the view and modification operations.

• Assignee: Vinod Kumar Vavilapalli
• Reporter: Devaraj Das
• Created: 17/Dec/09 05:54
• Updated: 24/Aug/10 21:19
• Resolved: 20/Feb/10 19:16

Description

It would be good to define the notion of job permissions analogous to file permissions. Then the JobTracker can restrict who can "read" (e.g. look at the job page) or "modify" (e.g. kill) jobs.

Issue Links

• blocks: MAPREDUCE-1455 Authorization for servlets
• duplicates: MAPREDUCE-1483 CompletedJobStore should be authorized using job-acls
• relates to: MAPREDUCE-1455 Authorization for servlets
• relates to: MAPREDUCE-1483 CompletedJobStore should be authorized using job-acls