Versions Compared

Old Version 18

changes.mady.by.user richard

Saved on

compared with

New Version 19

changes.mady.by.user richard

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

ResourceGlobal NamespaceInstance
Connector
  • View
  • Use
  • View
  • Use
Link
  • Create
  • View
  • Update
  • Delete
  • Use
  • Enable_Disable
  • View
  • Update
  • Delete
  • Use
  • Enable_Disable
Job
  • Create
  • View
  • Update
  • Delete
  • Use
  • Enable_Disable
  • Start_Stop
  • Status
  • View
  • Update
  • Delete
  • Use
  • Enable_Disable
Submission
  • View
  • Create (Start job)
  • Update (Stop)
  • View
  • Update (Stop)
  • Start_Stop
  • Status
create submission ()submission create (global)
ActionPrivilege needed
show connector
  • connector view
show link
  • link view
create link
  • link create (global)
  • connector use
update link
  • link update
  • connector use
delete link
  • link delete
enable link
  • link enable_disable
disable link
  • link enable_disable
show job
  • job view
create job
  • job create (global)
  • both links use
update job
  • job update
  • both links use
delete job
  • job delete
enable job
  • job enable_disable
disable job
  • job enable_disable
show submission
  • submission view
start job
  • job start_stop
useupdate submission (stop job)
  • submission update
  • job start_stop
show submission
  • job status
delete submission
  • submission delete

 

Authorization framework

 

...

  • Four metadata classes.
    • Role
    • principal
      • This class defines user or group.
      • Type: user, group, role.
      • principal could be granted a role. i.e. if we want to grant a admin role to user hadoop, then grantRole (principal (name=hadoop, type=user), role (name=admin)).
    • Resource
      • This class defines four resources in Sqoop 2.
      • Type: connector, link, job, submission.
    • Privilege
      • Action: create, view, update, delete, use, enable, disable.
      • with_grant_option: boolean, defines whether the role could grant this privilege to other role.

...