[ 
https://issues.apache.org/jira/browse/MAPREDUCE-1542?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12844849#action_12844849
 ] 

Hemanth Yamijala commented on MAPREDUCE-1542:
---------------------------------------------

I looked again at TestWebUIAuthorization. It does look like it is covering 
everything required. Can you confirm if my understanding on this test case is 
right:

Basically, we have configured adminGroup as the admin ACL. 'admin' user is part 
of the adminGroup (as defined in the custom user to group mapping). Then we 
drive all operations setting 'admin' as the user. All of these will cover the 
code path of checking the adminUser because these will be mapped to the 
adminGroup which is in the administrators ACL. Correct ?

> Deprecate mapred.permissions.supergroup in favor of 
> hadoop.cluster.administrators
> ---------------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-1542
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-1542
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: security
>            Reporter: Vinod K V
>            Assignee: Ravi Gummadi
>             Fix For: 0.22.0
>
>         Attachments: 1542.20S.patch, 1542.patch, 1542.v1.patch, 
> mapreduce-1542-y20s.patch
>
>
> HADOOP-6568 added the configuration {{hadoop.cluster.administrators}} through 
> which admins can configure who the superusers/supergroups for the cluster 
> are. MAPREDUCE itself already has {{mapred.permissions.supergroup}} (which is 
> just a single group). As agreed upon at HADOOP-6568, this should be 
> deprecated in favor of {{hadoop.cluster.administrators}}.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to