Allow topologies to be executed as specific users

[pdread100]

Some users want the option of running their topologies as a specific user. This on the surface would be easy to do by setting the FrameworkInfo.setUser() to that user. However that would force the Supervisor and LogViewer (PR) to run as that user as well. There may be scenarios where this is not advisable.

It appears that if CommandInfo.setUser() is set then the supervisor/topologies will be run as that user. I know mesos/myriad has gone through extensive coding to get this right, including chown of the installation directories.

[erikdw]

This relates to extensive efforts in storm-0.10.0+ to have user-specific topologies via "storm authentication":

• https://storm.apache.org/2015/06/15/storm0100-beta-released.html
• https://github.com/apache/storm/blob/41c896708cd3c9d48005580e5e71e285597d5539/SECURITY.md

[erikdw]

I'm not planning to work on this.

[erikdw]

@fuji-151a & @JessicaLHartog : FYI, this relates to PR #195. Please take note of @pdread100's initial comment about the user for the Supervisor and Logviewer. Since the launching of Logviewer is not supported by me in this project (not until STORM-1342 is fixed!), I don't particularly care about that part of it. And considering the Supervisor -- I don't see a problem with it being the same user as the workers.

[erikdw]

Notably, the idea with this issue was I think to not only allow the storm processes to run as a non-root user, but also to be able to allow different topologies to have different users. That would be a further enhancement beyond the change proposed to #195. I suppose it could be a Topology-specific configuration option, similar to the topology.mesos.worker.cpu option. e.g., topology.mesos.user.

[fuji-151a]

@erikdw

I don't see a problem with it being the same user as the workers.

I agree.
However, I want to specify separately for the user of Nimbus outside the Mesos cluster and the user of Supervisor inside the Mesos cluster.
I think the function of this issue is very wonderful, but I don't need that thing.

[erikdw]

@fuji-151a : gotcha. Please give us a bit of time to merge the proposed change in #195, I wanna test it myself first.