Mailing-List: contact dev-help@falcon.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@falcon.apache.org
Date: Fri, 17 Jul 2015 01:07:04 +0000 (UTC)
From: "Balu Vellanki (JIRA)" <jira@apache.org>
To: dev@falcon.incubator.apache.org
Message-ID: <JIRA.12762699.1418941048000.210792.1437095224676@Atlassian.JIRA>
In-Reply-To: <JIRA.12762699.1418941048000@Atlassian.JIRA>
References: <JIRA.12762699.1418941048000@Atlassian.JIRA>
 <JIRA.12762699.1418941048972@arcas>
Subject: [jira] [Resolved] (FALCON-959) Unable to update feed/process acl to
 a different user of different group
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/FALCON-959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Balu Vellanki resolved FALCON-959.
----------------------------------
    Resolution: Not A Problem

It is correct behavior that Falcon does not allow change of ACL to a different user and different group. HDFS does not allow this behavior either. 

> Unable to update feed/process acl to a different user of different group
> ------------------------------------------------------------------------
>
>                 Key: FALCON-959
>                 URL: https://issues.apache.org/jira/browse/FALCON-959
>             Project: Falcon
>          Issue Type: Bug
>    Affects Versions: 0.6
>            Reporter: Raghav Kumar Gautam
>            Assignee: Balu Vellanki
>             Fix For: 0.7
>
>
> We can't update a feed/process acl to a different user of a different group. In this case root user of root group.
> Old feed:
> {code}
> 2014-12-10 15:21:01,712 INFO  - [pool-4-thread-1:feedAclUpdate] ~ Updating feed:
> <?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e" description="clicks log">
>     <partitions>
>         <partition name="country"/>
>         <partition name="colo"/>
>     </partitions>
>     <frequency>minutes(20)</frequency>
>     <timezone>UTC</timezone>
>     <late-arrival cut-off="hours(6)"/>
>     <clusters>
>         <cluster name="corp-9cc9bf87" type="source">
>             <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
>             <retention limit="months(9000)" action="delete"/>
>         </cluster>
>     </clusters>
>     <locations>
>         <location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
>         <location type="stats" path="/projects/falcon/clicksStats"/>
>         <location type="meta" path="/projects/falcon/clicksMetaData"/>
>     </locations>
>     <ACL owner="hrt_qa" group="users" permission="*"/>
>     <schema location="/schema/clicks" provider="protobuf"/>
>     <properties>
>         <property name="field1" value="value1"/>
>         <property name="field2" value="value2"/>
>     </properties>
> </feed>
>  (AbstractEntityHelper:424)
> {code}
> New feed:
> {code}
> 2014-12-10 15:21:01,737 INFO  - [pool-4-thread-1:feedAclUpdate] ~ To feed:
> <?xml version="1.0" encoding="UTF-8"?><feed xmlns="uri:falcon:feed:0.1" name="raaw-logs16-be6a8b2e" description="clicks log">
>     <partitions>
>         <partition name="country"/>
>         <partition name="colo"/>
>     </partitions>
>     <frequency>minutes(20)</frequency>
>     <timezone>UTC</timezone>
>     <late-arrival cut-off="hours(6)"/>
>     <clusters>
>         <cluster name="corp-9cc9bf87" type="source">
>             <validity start="2009-02-01T00:00Z" end="2099-05-01T00:00Z"/>
>             <retention limit="months(9000)" action="delete"/>
>         </cluster>
>     </clusters>
>     <locations>
>         <location type="data" path="/tmp/falcon-regression/FeedAclTest/input/${YEAR}/${MONTH}/${DAY}/${HOUR}/${MINUTE}"/>
>         <location type="stats" path="/projects/falcon/clicksStats"/>
>         <location type="meta" path="/projects/falcon/clicksMetaData"/>
>     </locations>
>     <ACL owner="root" group="root" permission="*"/>
>     <schema location="/schema/clicks" provider="protobuf"/>
>     <properties>
>         <property name="field1" value="value1"/>
>         <property name="field2" value="value2"/>
>     </properties>
> </feed>
>  (AbstractEntityHelper:425)
> {code}
> Falcon's response:
> {code}
> 2014-12-10 15:21:01,887 INFO  - [pool-4-thread-1:feedAclUpdate] ~ The web service response is:
> <?xml version="1.0" encoding="UTF-8"?><result>
>   <status>FAILED</status>
>   <message>org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: org.apache.hadoop.security.authorize.AuthorizationException: Permission deni\
> ed: authenticatedUser=hrt_qa not entity owner=root, entity=raaw-logs16-be6a8b2e, action=submit</message>
> </result>
>  (ServiceResponse:77)
> {code}


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)