ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Colm O hEigeartaigh (JIRA)" <j...@apache.org>
Subject [jira] [Created] (RANGER-1885) Remove implied grant for the administer queue permission for the Yarn plugin
Date Mon, 13 Nov 2017 10:32:00 GMT
Colm O hEigeartaigh created RANGER-1885:
-------------------------------------------

             Summary: Remove implied grant for the administer queue permission for the Yarn
plugin
                 Key: RANGER-1885
                 URL: https://issues.apache.org/jira/browse/RANGER-1885
             Project: Ranger
          Issue Type: Bug
          Components: plugins
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 1.0.0


This task is to remove the implied grant for the administer queue permission for the Yarn
plugin. Previously, the administer queue permission implied the submit application permission.
However, this implication can cause problems when a user is denied the administer queue permission,
but explicitly allowed the submit application permission, as the administer queue negative
permission then overrides the positive submit application permission (see https://issues.apache.org/jira/browse/RANGER-1339).
The easiest fix is just to remove the implied grant, so a user must be explicitly granted
the submit application permission in addition to administer queue.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message