[YARN-8249] Few REST api's in RMWebServices are missing static user check

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 3.1.0
• Fix Version/s: 2.10.0, 3.2.0, 3.1.1
• Component/s: webapp, yarn
• Target Version/s: 2.8.4, 3.1.1, 2.9.2, 3.0.3
• Hadoop Flags: Reviewed
• Assignee: Sunil G
• Reporter: Sunil G
• Created: 04/May/18 16:50
• Updated: 16/May/18 06:48
• Resolved: 16/May/18 06:48

Description

Few REST endpoints like node label/ scheduler-conf etc are missing static user validation check. Writable apis should not be ran for static users. This is not a security hole as such as yarn.admin.acls will be configured to certain users in secure cluster correctly. However such a check will help to have same semantics across various apis.