[ 
https://issues.apache.org/jira/browse/MAPREDUCE-2298?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12990244#comment-12990244
 ] 

Todd Lipcon commented on MAPREDUCE-2298:
----------------------------------------

In trunk we already check JSPUtil.privateActionsAllowed() 
(webinterface.private.actions) before allowing these. Is that not enough?

Clearly using the authentication system and an ACL would be preferable, but I 
don't think we should wholesale disable this feature since it's already easy to 
turn off.

> FairScheduler status page allows users to set pool and priority
> ---------------------------------------------------------------
>
>                 Key: MAPREDUCE-2298
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2298
>             Project: Hadoop Map/Reduce
>          Issue Type: Improvement
>          Components: contrib/fair-share
>            Reporter: Patrick Angeles
>
> The FairScheduler status page should allow users to view status without 
> enabling admin functions like set pool and set priority.
> One proposal is to disable all admin commands from the FairScheduler status 
> page to make it read only. We would have to provide an alternate 
> administration interface, for example via shell (MAPREDUCE-2292).

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to