[ 
https://issues.apache.org/jira/browse/RANGER-1339?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15948825#comment-15948825
 ] 

Colm O hEigeartaigh commented on RANGER-1339:
---------------------------------------------

How are you creating a DENY policy for Yarn? I only see an option to create an 
"ALLOW" policy in the UI? I created a test-case where only a user "alice" has 
the submit-app privilege, and not the admin-queue privilege, and the job ran OK.

> DENY and ALLOW EXCLUSION do not work with YARN
> ----------------------------------------------
>
>                 Key: RANGER-1339
>                 URL: https://issues.apache.org/jira/browse/RANGER-1339
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>    Affects Versions: 0.6.0, 0.7.0, 0.6.2
>            Reporter: Yan
>
> When a user is denied, or excluded from allowed, the use of "admin-queue", 
> but is allowed the "submit-app", he is actually unable to submit Yarn jobs at 
> all.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to