falcon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Raghav Kumar Gautam (JIRA)" <j...@apache.org>
Subject [jira] [Created] (FALCON-959) Unable to update feed/process acl to a different user of different group
Date Thu, 18 Dec 2014 22:18:14 GMT
Raghav Kumar Gautam created FALCON-959:
------------------------------------------

             Summary: Unable to update feed/process acl to a different user of different group
                 Key: FALCON-959
                 URL: https://issues.apache.org/jira/browse/FALCON-959
             Project: Falcon
          Issue Type: Bug
    Affects Versions: 0.6
            Reporter: Raghav Kumar Gautam
            Assignee: Balu Vellanki
             Fix For: 0.7


We can't update a feed/process acl to a different user of a different group. In this case
root user of root group.

Old feed:
{code}
2014-12-10 15:21:01,712 INFO  - [pool-4-thread-1:feedAclUpdate] ~ Updating feed:
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e"
description="clicks log">
    <partitions>
        <partition name="country"/>
        <partition name="colo"/>
    </partitions>
    <frequency>minutes(20)</frequency>
    <timezone>UTC</timezone>
    <late-arrival cut-off="hours(6)"/>
    <clusters>
        <cluster name="corp-9cc9bf87" type="source">
            <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
            <retention limit="months(9000)" action="delete"/>
        </cluster>
    </clusters>
    <locations>
        <location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
        <location type="stats" path="/projects/falcon/clicksStats"/>
        <location type="meta" path="/projects/falcon/clicksMetaData"/>
    </locations>
    <ACL owner="hrt_qa" group="users" permission="*"/>
    <schema location="/schema/clicks" provider="protobuf"/>
    <properties>
        <property name="field1" value="value1"/>
        <property name="field2" value="value2"/>
    </properties>
</feed>
 (AbstractEntityHelper:424)
{code}

New feed:
{code}
2014-12-10 15:21:01,737 INFO  - [pool-4-thread-1:feedAclUpdate] ~ To feed:
<?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e"
description="clicks log">
    <partitions>
        <partition name="country"/>
        <partition name="colo"/>
    </partitions>
    <frequency>minutes(20)</frequency>
    <timezone>UTC</timezone>
    <late-arrival cut-off="hours(6)"/>
    <clusters>
        <cluster name="corp-9cc9bf87" type="source">
            <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
            <retention limit="months(9000)" action="delete"/>
        </cluster>
    </clusters>
    <locations>
        <location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
        <location type="stats" path="/projects/falcon/clicksStats"/>
        <location type="meta" path="/projects/falcon/clicksMetaData"/>
    </locations>
    <ACL owner="root" group="root" permission="*"/>
    <schema location="/schema/clicks" provider="protobuf"/>
    <properties>
        <property name="field1" value="value1"/>
        <property name="field2" value="value2"/>
    </properties>
</feed>
 (AbstractEntityHelper:425)
{code}

Falcon's response:
{code}
2014-12-10 15:21:01,887 INFO  - [pool-4-thread-1:feedAclUpdate] ~ The web service response
is:
<?xml version="1.0" encoding="UTF-8"?><result>
  <status>FAILED</status>
  <message>org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException:
org.apache.hadoop.security.authorize.AuthorizationException: Permission deni\
ed: authenticatedUser=hrt_qa not entity owner=root, entity=raaw-logs16-be6a8b2e, action=submit</message>
</result>
 (ServiceResponse:77)
{code}





--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message