[MAPREDUCE-5475] MRClientService does not verify ACLs properly

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.0.4-alpha, 0.23.9
• Fix Version/s: 0.23.10, 2.1.1-beta
• Component/s: mr-am, mrv2
• Target Version/s: 0.23.10, 2.1.1-beta
• Hadoop Flags: Reviewed
• Assignee: Jason Darrell Lowe
• Reporter: Jason Darrell Lowe
• Created: 21/Aug/13 18:29
• Updated: 24/Sep/13 23:33
• Resolved: 04/Sep/13 22:39

Description

When MRClientService receives requests, it calls verifyAndGetJob which does not actually validate that the current user has the proper access.

Issue Links

• is blocked by: YARN-707 Add user info in the YARN ClientToken