[YARN-7982] Do ACLs check while retrieving entity-types per application

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Assignee: Prabhu Joseph
• Reporter: Rohith Sharma K S
• Created: 27/Feb/18 10:01
• Updated: 21/Nov/21 17:59
• Resolved: 02/Sep/19 04:46

Description

REST end point /apps/$appid/entity-types retrieves all the entity-types for given application. This need to be guarded with ACL check

[yarn@yarn-ats-3 ~]$ curl "http://yarn-ats-3:8198/ws/v2/timeline/apps/application_1552297011473_0002?user.name=ambari-qa1"
{"exception":"ForbiddenException","message":"java.lang.Exception: User ambari-qa1 is not allowed to read TimelineService V2 data.","javaClassName":"org.apache.hadoop.yarn.webapp.ForbiddenException"}

[yarn@yarn-ats-3 ~]$ curl "http://yarn-ats-3:8198/ws/v2/timeline/apps/application_1552297011473_0002/entity-types?user.name=ambari-qa1"
["YARN_APPLICATION_ATTEMPT","YARN_CONTAINER"]

Issue Links

• is part of: YARN-3895 Support ACLs in ATSv2