[ https://issues.apache.org/jira/browse/HADOOP-10650?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14099991#comment-14099991 ]
Hudson commented on HADOOP-10650: --------------------------------- FAILURE: Integrated in Hadoop-trunk-Commit #6081 (See [https://builds.apache.org/job/Hadoop-trunk-Commit/6081/]) HADOOP-10650. Add ability to specify a reverse ACL (black list) of users and groups. (Contributed by Benoy Antony) (arp: http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1618482) * /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt * /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/fs/CommonConfigurationKeys.java * /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/authorize/ServiceAuthorizationManager.java * /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/site/apt/ServiceLevelAuth.apt.vm * /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/security/authorize/TestServiceAuthorization.java > Add ability to specify a reverse ACL (black list) of users and groups > --------------------------------------------------------------------- > > Key: HADOOP-10650 > URL: https://issues.apache.org/jira/browse/HADOOP-10650 > Project: Hadoop Common > Issue Type: Sub-task > Components: security > Reporter: Benoy Antony > Assignee: Benoy Antony > Fix For: 3.0.0, 2.6.0 > > Attachments: HADOOP-10650.patch, HADOOP-10650.patch, > HADOOP-10650.patch > > > Currently , it is possible to define a ACL (user and groups) for a service. > To temporarily remove authorization for a set of users, administrator needs > to remove the users from the specific group and this may be a lengthy process > ( update ldap groups, flush caches on machines). > If there is a facility to define a reverse ACL for services, then > administrator can disable users by specifying the users in reverse ACL. In > other words, one can specify a whitelist of users and groups as well as a > blacklist of users and groups. > One can also specify a default blacklist to disable the users from accessing > any service. -- This message was sent by Atlassian JIRA (v6.2#6252)