[
https://issues.apache.org/jira/browse/MAPREDUCE-5750?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alex Nastetsky updated MAPREDUCE-5750:
--------------------------------------
Description:
We need a way to restrict the ability to see the list of jobs in a queue.
Currently, the only queue ACLs available are acl_administer_queues,
acl_administer_queue and acl_submit_applications, none of which control the
ability to the see list of jobs in a queue.
This requirement is necessary because the Job History server provides a lot of
potentially sensitive info in the job listing alone, e.g. a Hive map reduce job
shows the query itself in the Name column.
The only thing we have currently available is the ability to filter by queue
name, but there is no way to enforce a filter.
NOTE: This is a duplicate of YARN-1825, not sure if this should go into MR or
YARN.
was:
We need a way to restrict the ability to see the list of jobs in a queue.
Currently, the only queue ACLs available are acl_administer_queues,
acl_administer_queue and acl_submit_applications, none of which control the
ability to the see list of jobs in a queue.
This requirement is necessary because the Job History server provides a lot of
potentially sensitive info in the job listing alone, e.g. a Hive map reduce job
shows the query itself in the Name column.
The only thing we have currently available is the ability to filter by queue
name, but there is no way to enforce a filter.
> Need ability to create ACL for viewing the listing of a job queue
> -----------------------------------------------------------------
>
> Key: MAPREDUCE-5750
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-5750
> Project: Hadoop Map/Reduce
> Issue Type: Improvement
> Affects Versions: 2.1.0-beta
> Environment: HDP-2.0.6
> Reporter: Alex Nastetsky
>
> We need a way to restrict the ability to see the list of jobs in a queue.
> Currently, the only queue ACLs available are acl_administer_queues,
> acl_administer_queue and acl_submit_applications, none of which control the
> ability to the see list of jobs in a queue.
> This requirement is necessary because the Job History server provides a lot
> of potentially sensitive info in the job listing alone, e.g. a Hive map
> reduce job shows the query itself in the Name column.
> The only thing we have currently available is the ability to filter by queue
> name, but there is no way to enforce a filter.
> NOTE: This is a duplicate of YARN-1825, not sure if this should go into MR or
> YARN.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
