hadoop-common-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hemanth Yamijala (JIRA)" <j...@apache.org>
Subject [jira] Commented: (HADOOP-3698) Implement access control for submitting jobs to queues in the JobTracker
Date Thu, 21 Aug 2008 04:02:44 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-3698?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12624241#action_12624241

Hemanth Yamijala commented on HADOOP-3698:

bq. What do you mean by sysadmins? - do they have special priviledges beyond the ACL. I think
it makes sense for the superuser and the supergroup (of HDFS) to have full permissions to
job queues without the need for their username/groupname appear in the ACL. Is that what you
meant by sysadmins?

Sanjay, yes. This is what I mean by sysadmins. They have complete control over the system,
without needing special access control to be set up for them.

bq. I suggest we add the "changeACL operation right now; its default list should be null (ie
only the superuser/supergroup can modify it).

Is this because you believe that this operation can be delegated to others users/groups ?
Also, for this version of the resource manager, we don't have a UI for administering the queues.
In other words, even if we declare the operation right now, there is going to be no place
where we need to check this. I suggest we add this as a TODO comment to the Enum I've declared
above, on the lines of what Owen proposed for listjobs. Makes sense ?

> Implement access control for submitting jobs to queues in the JobTracker
> ------------------------------------------------------------------------
>                 Key: HADOOP-3698
>                 URL: https://issues.apache.org/jira/browse/HADOOP-3698
>             Project: Hadoop Core
>          Issue Type: New Feature
>          Components: mapred
>            Reporter: Hemanth Yamijala
>            Assignee: Hemanth Yamijala
>             Fix For: 0.19.0
> HADOOP-3445 implements multiple queues in the JobTracker as part of the new resource
manager for Hadoop (HADOOP-3421). There needs to be a mechanism to control who can submit
jobs to a specified queue. This JIRA is for tracking the requirements, approach and implementation
for the same.

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message