[
https://issues.apache.org/jira/browse/MAPREDUCE-1455?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12831880#action_12831880
]
Ravi Gummadi commented on MAPREDUCE-1455:
-----------------------------------------
We will get authenticated user using HttpServletRequest.getRemoteUser().
I am proposing to run the methods that access the job as the user(using
UserGroupInformation.doAs()) from JSPs and servlets sothat methods of
JobTracker can just do authorization(by checking the
UserGroupInformation.getCurrentUser()).
This avoids many changes in MAPREDUCE-1307 and also avoids adding new methods
that take UGI as parameter in jobtracker.
Thoughts ?
> Authorization for servlets
> --------------------------
>
> Key: MAPREDUCE-1455
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-1455
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Reporter: Devaraj Das
> Assignee: Ravi Gummadi
> Fix For: 0.22.0
>
>
> This jira is about building the authorization for servlets (on top of
> MAPREDUCE-1307). That is, the JobTracker/TaskTracker runs authorization
> checks on web requests based on the configured job permissions. For e.g., if
> the job permission is 600, then no one except the authenticated user can look
> at the job details via the browser. The authenticated user in the servlet can
> be obtained using the HttpServletRequest method.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
