Mailing-List: contact yarn-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 20 Jul 2017 15:54:00 +0000 (UTC)
From: "YunFan Zhou (JIRA)" <jira@apache.org>
To: yarn-issues@hadoop.apache.org
Message-ID: <JIRA.13085915.1499688185000.293436.1500566040765@Atlassian.JIRA>
In-Reply-To: <JIRA.13085915.1499688185000@Atlassian.JIRA>
References: <JIRA.13085915.1499688185000@Atlassian.JIRA> <JIRA.13085915.1499688185890@jira-lw-us.apache.org>
Subject: [jira] [Updated] (YARN-6791) Add a new acl control to make YARN acl
 control perfect
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
archived-at: Thu, 20 Jul 2017 15:54:06 -0000


     [ https://issues.apache.org/jira/browse/YARN-6791?page=3Dcom.atlassian=
.jira.plugin.system.issuetabpanels:all-tabpanel ]

YunFan Zhou updated YARN-6791:
------------------------------
    Attachment: YARN-6791.004.patch

> Add a new acl control to make YARN acl control perfect
> ------------------------------------------------------
>
>                 Key: YARN-6791
>                 URL: https://issues.apache.org/jira/browse/YARN-6791
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: yarn
>    Affects Versions: 2.7.2
>            Reporter: YunFan Zhou
>            Assignee: YunFan Zhou
>             Fix For: 2.7.2
>
>         Attachments: screenshot-1.png, screenshot-2.png, YARN-6791.001.pa=
tch, YARN-6791.002.patch, YARN-6791.003.patch, YARN-6791.004.patch
>
>
> The yarn application acl control is not so perfect which could let us pre=
tty confused sometimes.
> !screenshot-1.png!
> The yarn acl is disabled default, but when we enable it.=20
> You will find the others who neither  is yarn admin nor queue admin can n=
ot view the application detail.=20
> It will show something as blow in YARN RM web ui:
> !screenshot-2.png!=20
> So when we enable those configs, you will find it is very inconvenient to=
 view the application status
> when use RM web ui.
> There are two ways to solve the problem:
> 1.  To make the web ui more perfect, and can allow user to login as any u=
ses he want.
> Besides=EF=BC=8C it should provide a perfect verification mechanism.
> 2. Add a config in YarnConfiguration, which can allow some uses view any =
applications he want.
> But he has not modify permissions.=20
> In this way, the user can view all applications  but can not kill other u=
sers applications.
> Of the above two solutions=EF=BC=8C I will choose the second solution.
> It is low cost but is more useful.
> I will work on this, and upload the patch later.


--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org