hadoop-mapreduce-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Vinod K V (JIRA)" <j...@apache.org>
Subject [jira] Commented: (MAPREDUCE-1493) Authorization for job-history pages
Date Mon, 15 Feb 2010 09:01:29 GMT

    [ https://issues.apache.org/jira/browse/MAPREDUCE-1493?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12833721#action_12833721
] 

Vinod K V commented on MAPREDUCE-1493:
--------------------------------------

For getting the ACLs for retired jobs, we actually have two options:
 - *Log the ACLs also into job-history itself* during job-submission and retrieve the same
for access control.
    -- This avoids reading job-conf file for every request of a job specific page.
    -- Needs a change to JobHistory submisison event.
 - *Read the job-conf file on history also* to get the acls.
    -- Introduces extra round trip to DFS
    -- No change to JobHistory.

I think the former is better performance wise. Thoughts?

> Authorization for job-history pages
> -----------------------------------
>
>                 Key: MAPREDUCE-1493
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1493
>             Project: Hadoop Map/Reduce
>          Issue Type: Sub-task
>          Components: jobtracker, security
>            Reporter: Vinod K V
>             Fix For: 0.22.0
>
>
> MAPREDUCE-1455 introduces authorization for most of the Map/Reduce jsp pages and servlets,
but left history pages. This JIRA will make sure that authorization checks are made while
accessing job-history pages also.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message