[MAPREDUCE-7293] All pages in JHS should honor yarn.webapp.filter-entity-list-by-user

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Component/s: jobhistoryserver
• Assignee: Bilwa S T
• Reporter: Bilwa S T
• Created: 14/Aug/20 18:38
• Updated: 12/Nov/20 16:35
• Resolved: 12/Nov/20 16:34

Description

Currently only HsJobsBlock checks for the access. If user who doesn't have permission to access job page is able to do it which is wrong. So we need to have below check in HsJobBlock,HsTasksBlock and HsTaskPage

      if (isFilterAppListByUserEnabled && ugi != null && !aclsManager
          .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) {
        
      }