[OOZIE-228] For authorization we should use the ACL model

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.2.0
• Assignee: Alejandro Abdelnur
• Reporter: Hadoop QA
• Created: 08/Sep/11 04:51
• Updated: 06/Jun/12 23:40
• Resolved: 01/Mar/12 19:44

Description

Currently job authorization is based on a group (a la FileSystem permissions).

Instead, we should use ACLs as Hadoop does, the ACL would indicate which users/groups are allow to manage the job.

A job properties would specify via the following property:

oozie.job.acl=[<USER>|<GROUP>]*