[YARN-9445] yarn.admin.acl is futile

• Type: Bug
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.3.0
• Component/s: security
• Assignee: Gergely Pollák
• Reporter: Peter Simon
• Created: 05/Apr/19 13:10
• Updated: 08/Apr/19 23:56

Description

• Define a queue with restrictive administerApps settings (e.g. yarn)
• Set yarn.admin.acl to "*".
• Try to submit an application with user yarn, it is denied.

This way my expected behaviour would be that while everyone is admin, I can submit to whatever pool.