Agree, that sounds fine.

Regards,
Mridul
On Feb 19, 2014 11:43 PM, "Tom Graves" <notifications@github.com> wrote:

> In core/src/main/scala/org/apache/spark/SecurityManager.scala:
>
> > +      creds.addSecretKey(new Text("akkaCookie"), sCookie.getBytes())
> > +      SparkHadoopUtil.get.addCurrentUserCredentials(creds)
> > +      logDebug("adding secret to credentials yarn mode")
> > +    } else {
> > +      System.setProperty("SPARK_SECRET", sCookie)
> > +      logDebug("adding secret to java property")
> > +    }
> > +    return sCookie
> > +  }
> > +
> > +  def isUIAuthenticationEnabled(): Boolean = return isUIAuthOn
> > +
> > +  // allow anyone in the acl list and the application owner
> > +  def checkUIViewPermissions(user: String): Boolean = {
> > +    if (isUIAuthenticationEnabled() && (user != null)) {
> > +      if ((!viewAcls.contains(user)) && (user != System.getProperty("user.name"))) {
>
> Good idea to just prepopulate it. I assume its safer just to add both
> user.name and SPARK_USER to acl list if they are set?
>
> --
> Reply to this email directly or view it on GitHub<https://github.com/apache/incubator-spark/pull/332/files#r9875857>
> .
>