flink-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Chesnay Schepler (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FLINK-6454) Add more permission settings to the web UI
Date Fri, 19 May 2017 12:05:04 GMT

    [ https://issues.apache.org/jira/browse/FLINK-6454?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16017303#comment-16017303

Chesnay Schepler commented on FLINK-6454:

We can combine both approaches into a single setting.

We can have access privileges like "LOGS, DAG" etc and access levels like "JOB".
We then add a single configuration parameter "jobmanager.web.access", where you can specify
a list of the above, like "JOB TM_LOG". We could also include a quantifier {{-}}, as in "JOB
-DAG", which would allow to view all job information, except the dag. This should provide
both compact, but optionally fine-grained, configuration.

> Add more permission settings to the web UI
> ------------------------------------------
>                 Key: FLINK-6454
>                 URL: https://issues.apache.org/jira/browse/FLINK-6454
>             Project: Flink
>          Issue Type: Sub-task
>          Components: Webfrontend
>            Reporter: Stephan Ewen
>              Labels: starter
> Currently, the web UI allows all users with access everything. Only job upload has a
separate permission setting.
> We should generalize that to more aspects of the UI, such as cancelling jobs, accessing
logs, or accessing metrics.
> We could add a flag for each feature (enable / disable).
> Alternatively, we can add an access level to the UI:
>     # view job only (dag, timeling, checkpoint stats)
>     # view dag and metrics + logs
>     # view dag/metrics/logs plus allow stop / cancel / savepoint
>     # allow all (before plus submitting new jobs)
> The second options is less flexible, but more compact to configure.

This message was sent by Atlassian JIRA

View raw message