[
https://issues.apache.org/jira/browse/HDFS-2917?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eli Collins updated HDFS-2917:
------------------------------
Attachment: hdfs-2917.txt
Patch attached. Makes the entire HAServiceProtocol interface check for access
control. If people need to see which is active/standby we should probably make
that available via metrics or another interface.
For sanity I tested a build from a tarball, tested failover with and without
permissions enabled, and verified that a user w/o permission gets permissioned
denied.
> HA: haadmin should not work if run by regular user
> --------------------------------------------------
>
> Key: HDFS-2917
> URL: https://issues.apache.org/jira/browse/HDFS-2917
> Project: Hadoop HDFS
> Issue Type: Sub-task
> Components: ha, name-node
> Reporter: Aaron T. Myers
> Assignee: Eli Collins
> Fix For: HA branch (HDFS-1623)
>
> Attachments: hdfs-2917.txt
>
>
> Like dfsadmin, haadmin should require HDFS superuser privileges to work.
> Currently any user can use haadmin.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
