Return-Path: X-Original-To: apmail-ambari-dev-archive@www.apache.org Delivered-To: apmail-ambari-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 10DA617E69 for ; Fri, 3 Apr 2015 22:54:24 +0000 (UTC) Received: (qmail 19602 invoked by uid 500); 3 Apr 2015 22:54:24 -0000 Delivered-To: apmail-ambari-dev-archive@ambari.apache.org Received: (qmail 19570 invoked by uid 500); 3 Apr 2015 22:54:23 -0000 Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list dev@ambari.apache.org Received: (qmail 19554 invoked by uid 99); 3 Apr 2015 22:54:23 -0000 Received: from reviews-vm.apache.org (HELO reviews.apache.org) (140.211.11.40) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 03 Apr 2015 22:54:23 +0000 Received: from reviews.apache.org (localhost [127.0.0.1]) by reviews.apache.org (Postfix) with ESMTP id EDD571D73D4; Fri, 3 Apr 2015 22:54:21 +0000 (UTC) Content-Type: multipart/alternative; boundary="===============7587266388363199876==" MIME-Version: 1.0 Subject: Re: Review Request 32804: Falcon View to use doAs impersonation for user.name in Ambari Views From: "Alejandro Fernandez" To: "Venkat Ranganathan" , "Yusaku Sako" , "Sumit Mohanty" , "Tom Beerbower" Cc: "Alejandro Fernandez" , "Ambari" Date: Fri, 03 Apr 2015 22:54:21 -0000 Message-ID: <20150403225421.16791.4199@reviews.apache.org> X-ReviewBoard-URL: https://reviews.apache.org/ Auto-Submitted: auto-generated Sender: "Alejandro Fernandez" X-ReviewGroup: Ambari X-ReviewRequest-URL: https://reviews.apache.org/r/32804/ X-Sender: "Alejandro Fernandez" References: <20150403043124.16792.10100@reviews.apache.org> In-Reply-To: <20150403043124.16792.10100@reviews.apache.org> Reply-To: "Alejandro Fernandez" X-ReviewRequest-Repository: ambari --===============7587266388363199876== MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit > On April 3, 2015, 4:31 a.m., Venkat Ranganathan wrote: > > ambari-server/src/main/java/org/apache/ambari/server/view/HttpImpersonatorImpl.java, line 267 > > > > > > Not sure if this can be made more generic. If there can be some generic header that can be explicitly specified for this purpose and we will check for that to set user name instead of looking for Falcon headers? Technically, we shouldn't have logic to detect Falcon View. Instead, the Falcon View can pass an ImpersonatorSetting object whose doAsParamName is "user.name" instead of the default "doAs". - Alejandro ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/32804/#review78762 ----------------------------------------------------------- On April 3, 2015, 12:46 a.m., Alejandro Fernandez wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/32804/ > ----------------------------------------------------------- > > (Updated April 3, 2015, 12:46 a.m.) > > > Review request for Ambari, Sumit Mohanty, Tom Beerbower, Venkat Ranganathan, and Yusaku Sako. > > > Bugs: AMBARI-10341 > https://issues.apache.org/jira/browse/AMBARI-10341 > > > Repository: ambari > > > Description > ------- > > Falcon View needs to use the HttpImpersonator interface in Ambari Views so it can proxy using the header user.name > > HttpImpersonatorImpl.java should only allow this if the request headers indicate it is for the Falcon View. > > > Diffs > ----- > > ambari-server/pom.xml 896a202 > ambari-server/src/main/java/org/apache/ambari/server/view/HttpImpersonatorImpl.java fe4e180 > ambari-server/src/test/java/org/apache/ambari/server/view/HttpImpersonatorImplTest.java 935b488 > ambari-views/pom.xml 8fcb5ae > ambari-views/src/main/java/org/apache/ambari/view/HttpImpersonator.java 02ce101 > ambari-views/src/main/java/org/apache/ambari/view/ImpersonatorResponse.java PRE-CREATION > > Diff: https://reviews.apache.org/r/32804/diff/ > > > Testing > ------- > > Ran local unit tests in HttpImpersonatorImplTest.java passed. > > > Thanks, > > Alejandro Fernandez > > --===============7587266388363199876==--