Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
3.1.0
-
None
Description
wilfreds mentioned that:
Queue ACLs work bottom up. The first check is made at the leaf queue. If the ACL at that level does not allow access we go up one level and check that level. That process is repeated until we hit the top in the form of the root queue. If at any level we are allowed to submit or administer then the action is allowed and we stop reversing up the tree.
Bottom up is a surprise behavior. Most queue related checking works top down. We should add this into Fair Scheduler Doc. In addition, maybe link the doc to Java Doc of AllocationFileLoaderService#getDefaultPermissions so that it won't be too confusing.