[ 
https://issues.apache.org/jira/browse/OOZIE-3126?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16254049#comment-16254049
 ] 

Rohini Palaniswamy commented on OOZIE-3126:
-------------------------------------------

Can we don conf.unset instead if setSystemInfoAuthUsers is false? 
useAdminUsersFile should be just in a if block and not else if.

> Add option to allow list of users to access system config
> ---------------------------------------------------------
>
>                 Key: OOZIE-3126
>                 URL: https://issues.apache.org/jira/browse/OOZIE-3126
>             Project: Oozie
>          Issue Type: Improvement
>            Reporter: Rohini Palaniswamy
>            Assignee: Satish Subhashrao Saley
>             Fix For: 4.3.1
>
>         Attachments: OOZIE-3126-1.patch, OOZIE-3126-2.patch
>
>
>    Currently we allow access to system config for all users. Though we mask 
> any sensitive information it is unnecessary to show it to all users. Can 
> restrict the access to admins, but services like Hue use the server side 
> config values to display UI accordingly (For eg: Server Timezone, whether SLA 
> is configured, what kind of credentials are supported, etc). So it would be 
> good to support restricting it to admins and a list of users.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to