ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Don Bosco Durai <bo...@apache.org>
Subject Re: Feedback request for https://reviews.apache.org/r/56094/
Date Wed, 08 Nov 2017 20:18:37 GMT
@madhan or @ramesh or @abhay are the right folks.



On 11/8/17, 4:52 AM, "Colm O hEigeartaigh" <coheigea@apache.org> wrote:

    A user logged an issue with Yarn that I finally got around to looking at.
    The proposed patch submitted by the user is here:
    The problem is that a user "alice" can have the "submit-app" permission,
    but be denied the "admin-queue" permission. This should work in theory, but
    it doesn't. "admin-queue" implies "submit-app", but the Ranger policy logic
    seems to interpret this implication incorrectly, in that a "negative"
    admin-queue policy overrides a "positive" submit-app policy.
    As the change is in the core policy logic I'd like an experienced reviewer
    to take a look.
    Colm O hEigeartaigh
    Talend Community Coder

View raw message