Uploaded image for project: 'Hadoop YARN'
  1. Hadoop YARN
  2. YARN-1269

QueueACLs doesn't work as root allows *

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      Even if we specify acl for default queue, say user1, user2 can still submit and kill applications on default queue, because the queue checked user2 don't have the access to it, it then checked whether user2 has the access to it's parent recursively, and finally it found user2 have the access to root.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                zjshen Zhijie Shen
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated: