Return-Path: Delivered-To: apmail-hadoop-mapreduce-issues-archive@minotaur.apache.org Received: (qmail 98572 invoked from network); 7 Feb 2010 09:50:51 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 7 Feb 2010 09:50:51 -0000 Received: (qmail 10058 invoked by uid 500); 7 Feb 2010 09:50:51 -0000 Delivered-To: apmail-hadoop-mapreduce-issues-archive@hadoop.apache.org Received: (qmail 9989 invoked by uid 500); 7 Feb 2010 09:50:51 -0000 Mailing-List: contact mapreduce-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: mapreduce-issues@hadoop.apache.org Delivered-To: mailing list mapreduce-issues@hadoop.apache.org Received: (qmail 9975 invoked by uid 99); 7 Feb 2010 09:50:51 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 07 Feb 2010 09:50:51 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.140] (HELO brutus.apache.org) (140.211.11.140) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 07 Feb 2010 09:50:49 +0000 Received: from brutus.apache.org (localhost [127.0.0.1]) by brutus.apache.org (Postfix) with ESMTP id 1F28F234C4B8 for ; Sun, 7 Feb 2010 01:50:28 -0800 (PST) Message-ID: <896842928.107031265536228126.JavaMail.jira@brutus.apache.org> Date: Sun, 7 Feb 2010 09:50:28 +0000 (UTC) From: "Devaraj Das (JIRA)" To: mapreduce-issues@hadoop.apache.org Subject: [jira] Commented: (MAPREDUCE-1307) Introduce the concept of Job Permissions In-Reply-To: <1188257451.1261029258069.JavaMail.jira@brutus> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 X-Virus-Checked: Checked by ClamAV on apache.org [ https://issues.apache.org/jira/browse/MAPREDUCE-1307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12830688#action_12830688 ] Devaraj Das commented on MAPREDUCE-1307: ---------------------------------------- The advantage with the file-system model is that it is really simple and would handle almost all cases that we might come across. The ACL model is also fine though it is tedious to specify that and pass it to the JobTracker. But it is good to look at the long term... So in that sense, I am tending to agree with Hemanth/Vinod. W.r.t condor, torque, i don't think that they have job level read/write permissions model. They are more concerned with the queue operations. But it is something that could be checked. > Introduce the concept of Job Permissions > ---------------------------------------- > > Key: MAPREDUCE-1307 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-1307 > Project: Hadoop Map/Reduce > Issue Type: Sub-task > Components: security > Reporter: Devaraj Das > Fix For: 0.22.0 > > Attachments: 1307-early-1.patch > > > It would be good to define the notion of job permissions analogous to file permissions. Then the JobTracker can restrict who can "read" (e.g. look at the job page) or "modify" (e.g. kill) jobs. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online.