[ 
https://issues.apache.org/jira/browse/MAPREDUCE-3910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13215729#comment-13215729
 ] 

John George commented on MAPREDUCE-3910:
----------------------------------------

The reason that the exception happens is because in LeafQueue.java, it checks 
for queue access by obtaining the UGI of current user, but since the current 
user has no context, it gets the logged in user who does not have permissions 
to access the queue. 
So my thinking is that either we should check acls against the passed in 
userName or set the context so that when getCurrentUser() is called, it returns 
the right user.

{code}
 @Override
  public void submitApplication(SchedulerApp application, String userName,
      String queue)  throws AccessControlException {
    // Careful! Locking order is important!

    // Check queue ACLs
    UserGroupInformation userUgi;
    try {
      userUgi = UserGroupInformation.getCurrentUser();
    } catch (IOException ioe) {
      throw new AccessControlException(ioe);
    }
    if (!hasAccess(QueueACL.SUBMIT_APPLICATIONS, userUgi)) {
      throw new AccessControlException("userName + " cannot submit" +
          " applications to queue " + getQueuePath());
    }

{code}
                
> user not allowed to submit jobs even though queue -showacls shows it allows
> ---------------------------------------------------------------------------
>
>                 Key: MAPREDUCE-3910
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-3910
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: mrv2
>    Affects Versions: 0.23.1, 0.23.2
>            Reporter: John George
>            Assignee: John George
>            Priority: Blocker
>
> User is not allowed to submit applications to a queue even though the queue 
> is configured correctly and mapred queue -showacls shows that the user is 
> allowed to submit

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to