[
https://issues.apache.org/jira/browse/LIVY-868?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alex Ang Hock Hee updated LIVY-868:
-----------------------------------
Description:
With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that
do not have view access should not be able to see others' jobs even at the
listing page. Referencing yarn: https://issues.apache.org/jira/browse/YARN-7157
However, users are able to see the other users' sessions at the UI page,
although they are unable to navigate in to see more details.
The sessions should be filtered before sending the list to the UI.
Pull request at https://github.com/apache/incubator-livy/pull/329
was:
With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that
do not have view access should not be able to see others' jobs even at the
listing page. Referencing yarn: https://issues.apache.org/jira/browse/YARN-7157
However, users are able to see the other users' sessions at the UI page,
although they are unable to navigate in to see more details.
The sessions should be filtered before sending the list to the UI.
> ACL on livy session listing
> ---------------------------
>
> Key: LIVY-868
> URL: https://issues.apache.org/jira/browse/LIVY-868
> Project: Livy
> Issue Type: Improvement
> Components: Server
> Affects Versions: 0.7.0
> Reporter: Alex Ang Hock Hee
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that
> do not have view access should not be able to see others' jobs even at the
> listing page. Referencing yarn:
> https://issues.apache.org/jira/browse/YARN-7157
> However, users are able to see the other users' sessions at the UI page,
> although they are unable to navigate in to see more details.
> The sessions should be filtered before sending the list to the UI.
> Pull request at https://github.com/apache/incubator-livy/pull/329
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
