[
https://issues.apache.org/jira/browse/MAPREDUCE-1493?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12833721#action_12833721
]
Vinod K V commented on MAPREDUCE-1493:
--------------------------------------
For getting the ACLs for retired jobs, we actually have two options:
- *Log the ACLs also into job-history itself* during job-submission and
retrieve the same for access control.
-- This avoids reading job-conf file for every request of a job specific
page.
-- Needs a change to JobHistory submisison event.
- *Read the job-conf file on history also* to get the acls.
-- Introduces extra round trip to DFS
-- No change to JobHistory.
I think the former is better performance wise. Thoughts?
> Authorization for job-history pages
> -----------------------------------
>
> Key: MAPREDUCE-1493
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-1493
> Project: Hadoop Map/Reduce
> Issue Type: Sub-task
> Components: jobtracker, security
> Reporter: Vinod K V
> Fix For: 0.22.0
>
>
> MAPREDUCE-1455 introduces authorization for most of the Map/Reduce jsp pages
> and servlets, but left history pages. This JIRA will make sure that
> authorization checks are made while accessing job-history pages also.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
