Return-Path: 
 <dev-return-4530-apmail-falcon-dev-archive=falcon.apache.org@falcon.incubator.apache.org>
X-Original-To: apmail-falcon-dev-archive@minotaur.apache.org
Delivered-To: apmail-falcon-dev-archive@minotaur.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id A056E11FB1
	for <apmail-falcon-dev-archive@minotaur.apache.org>;
 Wed,  9 Jul 2014 05:31:32 +0000 (UTC)
Received: (qmail 15777 invoked by uid 500); 9 Jul 2014 05:31:32 -0000
Delivered-To: apmail-falcon-dev-archive@falcon.apache.org
Received: (qmail 15735 invoked by uid 500); 9 Jul 2014 05:31:32 -0000
Mailing-List: contact dev-help@falcon.incubator.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@falcon.incubator.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@falcon.incubator.apache.org>
List-Post: <mailto:dev@falcon.incubator.apache.org>
List-Id: <dev.falcon.incubator.apache.org>
Reply-To: dev@falcon.incubator.apache.org
Delivered-To: mailing list dev@falcon.incubator.apache.org
Received: (qmail 15723 invoked by uid 99); 9 Jul 2014 05:31:32 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Jul 2014 05:31:32 +0000
X-ASF-Spam-Status: No, hits=-2000.7 required=5.0
	tests=ALL_TRUSTED,RP_MATCHES_RCVD
X-Spam-Check-By: apache.org
Received: from [140.211.11.3] (HELO mail.apache.org) (140.211.11.3)
    by apache.org (qpsmtpd/0.29) with SMTP; Wed, 09 Jul 2014 05:31:33 +0000
Received: (qmail 14484 invoked by uid 99); 9 Jul 2014 05:31:06 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 09 Jul 2014 05:31:06 +0000
Date: Wed, 9 Jul 2014 05:31:06 +0000 (UTC)
From: "pavan kumar kolamuri (JIRA)" <jira@apache.org>
To: dev@falcon.incubator.apache.org
Message-ID: <JIRA.12723630.1403702356327.6198.1404883866368@arcas>
In-Reply-To: <JIRA.12723630.1403702356327@arcas>
References: <JIRA.12723630.1403702356327@arcas>
Subject: [jira] [Commented] (FALCON-497) Able to submit feed even though
 owner of storage specified (location type=data) is different from the ACL
 owner
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394
X-Virus-Checked: Checked by ClamAV on apache.org


    [ https://issues.apache.org/jira/browse/FALCON-497?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14055862#comment-14055862 ] 

pavan kumar kolamuri commented on FALCON-497:
---------------------------------------------

+1 for the patch.

> Able to submit feed even though owner of storage specified (location type=data) is different from the ACL owner
> ---------------------------------------------------------------------------------------------------------------
>
>                 Key: FALCON-497
>                 URL: https://issues.apache.org/jira/browse/FALCON-497
>             Project: Falcon
>          Issue Type: Bug
>          Components: general
>    Affects Versions: 0.6
>         Environment: QA
>            Reporter: Karishma Gulati
>            Assignee: Shwetha G S
>             Fix For: 0.6
>
>         Attachments: FALCON-497.patch
>
>
> {code:xml}
> <?xml version="1.0" encoding="UTF-8"?>
> <feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-784f11fb-0952-4b0e-ae17-a767f094068a" description="clicks log">
>   <partitions>
>     <partition name="country"/>
>     <partition name="colo"/>
>   </partitions>
>   <frequency>minutes(20)</frequency>
>   <timezone>UTC</timezone>
>   <late-arrival cut-off="hours(6)"/>
>   <clusters>
>     <cluster name="corp-456c8ba1-00d9-46d2-a9c1-f5e0a561f8cc" type="source">
>       <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
>       <retention limit="months(9000)" action="delete"/>
>     </cluster>
>   </clusters>
>   <locations>
>     <location type="data" path="/samarth/input-data/rawLogs/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
>     <location type="stats" path="/projects/ivory/clicksStats"/>
>     <location type="meta" path="/projects/ivory/clicksMetaData"/>
>   </locations>
>   <ACL owner="karishma" group="group" permission="0x755"/>
>   <schema location="/schema/clicks" provider="protobuf"/>
>   <properties>
>     <property name="field1" value="value1"/>
>     <property name="field2" value="value2"/>
>   </properties>
> </feed>
> {code}
> If location path (type=data) exists in hdfs, and the feed is submitted with an ACL owner different from the storage owner, instead of getting an error, I'm succesfully able to submit the feed. 
> In falcon, the owner of the entire path 
> {code:xml}
> <location type="data" path="/samarth/input-data/rawLogs/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
> {code}
> (including the variables) is being checked for, instead of just that of "/samarth/input-data/rawLogs/".
> The feature successfully works if the location paths (type=meta or type=stats) exist on hdfs, and the owner of these is different from the ACL owner.In that case, I'm not allowed to submit the feed, and get the following error: 
> {code:xml}
>  <?xml version="1.0" encoding="UTF-8"?>
> <result>
>   <status>FAILED</status>
>   <message>ua1/Can't validate storage ACL (URI hdfs://192.168.138.27:8020)Feed ACL owner karishma doesn't match the actual file owner dataqa</message>
>   <requestId>ua1/15509f1d-2341-4ada-a119-b2d120a3d3fd</requestId>
> </result>
> {code}



--
This message was sent by Atlassian JIRA
(v6.2#6252)