Mailing-List: contact mapreduce-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: mapreduce-issues@hadoop.apache.org
Date: Mon, 10 Feb 2014 20:35:20 +0000 (UTC)
From: "Alex Nastetsky (JIRA)" <jira@apache.org>
To: mapreduce-issues@hadoop.apache.org
Message-ID: <JIRA.12694348.1392064497539.18973.1392064520793@arcas>
In-Reply-To: <JIRA.12694348.1392064497539@arcas>
References: <JIRA.12694348.1392064497539@arcas>
Subject: [jira] [Created] (MAPREDUCE-5750) Need ability to create ACL for
 viewing the listing of a job queue
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Alex Nastetsky created MAPREDUCE-5750:
-----------------------------------------

             Summary: Need ability to create ACL for viewing the listing of a job queue
                 Key: MAPREDUCE-5750
                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-5750
             Project: Hadoop Map/Reduce
          Issue Type: Improvement
    Affects Versions: 2.1.0-beta
         Environment: HDP-2.0.6
            Reporter: Alex Nastetsky


We need a way to restrict the ability to see the list of jobs in a queue. 

Currently, the only queue ACLs available are acl_administer_queues, acl_administer_queue and acl_submit_applications, none of which control the ability to the see list of jobs in a queue.

This requirement is necessary because the Job History server provides a lot of potentially sensitive info in the job listing alone, e.g. a Hive map reduce job shows the query itself in the Name column.

The only thing we have currently available is the ability to filter by queue name, but there is no way to enforce a filter.


--
This message was sent by Atlassian JIRA
(v6.1.5#6160)