[LIVY-868] ACL on livy session listing

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.7.0
• Fix Version/s: 0.9.0
• Component/s: Server
• Assignee: Unassigned
• Reporter: Alex Ang Hock Hee
• Created: 16/Sep/21 09:26
• Updated: 12/Nov/22 22:10

Description

With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that do not have view access should not be able to see others' jobs even at the listing page. Referencing yarn: https://issues.apache.org/jira/browse/YARN-7157

However, users are able to see the other users' sessions at the UI page, although they are unable to navigate in to see more details.

The sessions should be filtered before sending the list to the UI.

Pull request at https://github.com/apache/incubator-livy/pull/329