[SPARK-6106] Support user group mapping and groups in view, modify and admin acls

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Auto Closed
• Component/s: Spark Core
• Labels: Rhino Security bulk-closed
• Assignee: Unassigned
• Reporter: Haifeng Chen
• Created: 02/Mar/15 07:31
• Updated: 06/Jun/19 13:57
• Resolved: 06/Jun/19 13:57

Description

Spark support various acl settings for job to control the visibility of a job and user privileges.

Currently, the acls (view, modify and admin) is specified as a list of users.

As a convention, Hadoop common support a mechanism named as user group mapping and group names can specified in acls. The ability to do user group mapping and to allow groups to be specified in acls will greatly improve the flexibility and support enterprise use cases such as AD group integration.

This JIRA is to proposal to support user group mapping in Spark acl control and to allow specify group names in various acls.

Issue Links

• links to: [Github] Pull Request #5325 (colinmjj)