Return-Path: 
 <common-commits-return-15535-apmail-hadoop-common-commits-archive=hadoop.apache.org@hadoop.apache.org>
X-Original-To: apmail-hadoop-common-commits-archive@www.apache.org
Delivered-To: apmail-hadoop-common-commits-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id CFDC578A5
	for <apmail-hadoop-common-commits-archive@www.apache.org>;
 Wed,  5 Oct 2011 00:34:15 +0000 (UTC)
Received: (qmail 78841 invoked by uid 500); 5 Oct 2011 00:34:15 -0000
Delivered-To: apmail-hadoop-common-commits-archive@hadoop.apache.org
Received: (qmail 78802 invoked by uid 500); 5 Oct 2011 00:34:15 -0000
Mailing-List: contact common-commits-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:common-commits-help@hadoop.apache.org>
List-Unsubscribe: <mailto:common-commits-unsubscribe@hadoop.apache.org>
List-Post: <mailto:common-commits@hadoop.apache.org>
List-Id: <common-commits.hadoop.apache.org>
Reply-To: common-dev@hadoop.apache.org
Delivered-To: mailing list common-commits@hadoop.apache.org
Received: (qmail 78795 invoked by uid 99); 5 Oct 2011 00:34:15 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 05 Oct 2011 00:34:15 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=5.0
	tests=ALL_TRUSTED
X-Spam-Check-By: apache.org
Received: from [140.211.11.4] (HELO eris.apache.org) (140.211.11.4)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 05 Oct 2011 00:34:14 +0000
Received: from eris.apache.org (localhost [127.0.0.1])
	by eris.apache.org (Postfix) with ESMTP id 5A620238890A
	for <common-commits@hadoop.apache.org>; Wed,  5 Oct 2011 00:33:54 +0000 (UTC)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: svn commit: r1179024 -
 /hadoop/common/branches/branch-0.20-security-205/conf/mapred-queue-acls.xml
Date: Wed, 05 Oct 2011 00:33:54 -0000
To: common-commits@hadoop.apache.org
From: eyang@apache.org
X-Mailer: svnmailer-1.0.8-patched
Message-Id: <20111005003354.5A620238890A@eris.apache.org>

Author: eyang
Date: Wed Oct  5 00:33:53 2011
New Revision: 1179024

URL: http://svn.apache.org/viewvc?rev=1179024&view=rev
Log:
HADOOP-7707. Added toggle for dfs.support.append, webhdfs and hadoop proxy
user to setup config script. (Arpit Gupta via Eric Yang)

Added:
    hadoop/common/branches/branch-0.20-security-205/conf/mapred-queue-acls.xml

Added: hadoop/common/branches/branch-0.20-security-205/conf/mapred-queue-acls.xml
URL: http://svn.apache.org/viewvc/hadoop/common/branches/branch-0.20-security-205/conf/mapred-queue-acls.xml?rev=1179024&view=auto
==============================================================================
--- hadoop/common/branches/branch-0.20-security-205/conf/mapred-queue-acls.xml (added)
+++ hadoop/common/branches/branch-0.20-security-205/conf/mapred-queue-acls.xml Wed Oct  5 00:33:53 2011
@@ -0,0 +1,49 @@
+<?xml version="1.0"?>
+<?xml-stylesheet type="text/xsl" href="configuration.xsl"?>
+
+<!-- This is a template file for queue acls configuration properties -->
+
+<configuration>
+
+<property>
+  <name>mapred.queue.default.acl-submit-job</name>
+  <value> </value>
+  <description> Comma separated list of user and group names that are allowed
+    to submit jobs to the 'default' queue. The user list and the group list
+    are separated by a blank. For e.g. user1,user2 group1,group2. 
+    If set to the special value '*', it means all users are allowed to 
+    submit jobs. If set to ' '(i.e. space), no user will be allowed to submit
+    jobs.
+
+    It is only used if authorization is enabled in Map/Reduce by setting the
+    configuration property mapred.acls.enabled to true.
+
+    Irrespective of this ACL configuration, the user who started the cluster and
+    cluster administrators configured via
+    mapreduce.cluster.administrators can submit jobs.
+  </description>
+</property>
+
+<property>
+  <name>mapred.queue.default.acl-administer-jobs</name>
+  <value> </value>
+  <description> Comma separated list of user and group names that are allowed
+    to view job details, kill jobs or modify job's priority for all the jobs
+    in the 'default' queue. The user list and the group list
+    are separated by a blank. For e.g. user1,user2 group1,group2. 
+    If set to the special value '*', it means all users are allowed to do 
+    this operation. If set to ' '(i.e. space), no user will be allowed to do
+    this operation.
+
+    It is only used if authorization is enabled in Map/Reduce by setting the
+    configuration property mapred.acls.enabled to true.
+
+    Irrespective of this ACL configuration, the user who started the cluster and
+    cluster administrators configured via
+    mapreduce.cluster.administrators can do the above operations on all the jobs
+    in all the queues. The job owner can do all the above operations on his/her
+    job irrespective of this ACL configuration.
+  </description>
+</property>
+
+</configuration>