hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Zhijie Shen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-2390) Investigating whehther generic history service needs to support queue-acls
Date Wed, 13 Aug 2014 17:24:12 GMT

    [ https://issues.apache.org/jira/browse/YARN-2390?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14095748#comment-14095748

Zhijie Shen commented on YARN-2390:

bq. For getting application report, container report etc, currently in ClientRMService Queue
ACL for ADMINISTER_QUEUE is also checked.

That's correct. However, after the app is finished, it has been removed from the queue. The
question is whether we still want to give queue admin to the app that used to run on the queue,
but now is removed from it and finished.

Personally, I prefer not to grant the view access of the finished app to the queue admin,
because IMHO, the permissions of the queue admin should be within the scope of his assigned
queue. Thoughts?

> Investigating whehther generic history service needs to support queue-acls
> --------------------------------------------------------------------------
>                 Key: YARN-2390
>                 URL: https://issues.apache.org/jira/browse/YARN-2390
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>            Reporter: Zhijie Shen
> According YARN-1250,  it's arguable whether queue-acls should be applied to the generic
history service as well, because the queue admin may not need the access to the completed
application that is removed from the queue. Create this ticket to tackle the discussion around.

This message was sent by Atlassian JIRA

View raw message