[
https://issues.apache.org/jira/browse/MAPREDUCE-7196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16802737#comment-16802737
]
Wilfred Spiegelenburg commented on MAPREDUCE-7196:
--------------------------------------------------
Moved from the YARN project. The mapred-default.xml needs to be updated as the
queue administrators that existed in the MR1 time (JT & TT) do not exist
anymore and they get confused with the YARN queue admins which are not related
at all.
> FairScheduler queue ACLs not implemented for application actions
> ----------------------------------------------------------------
>
> Key: MAPREDUCE-7196
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-7196
> Project: Hadoop Map/Reduce
> Issue Type: Improvement
> Components: documentation
> Reporter: Tristan Stevens
> Priority: Major
>
> The mapred-site.xml options mapreduce.job.acl-modify-job and
> mapreduce.job.acl-view-job both specify that queue ACLs should apply for read
> and modify operations on a job, however according to
> org.apache.hadoop.yarn.server.security.ApplicationACLsManager.java this
> feature has not been implemented.
> This is very important otherwise it is difficult to manage a cluster with a
> complicated queue hierarchy without either putting everyone in the admin ACL,
> getting many support tickets or asking people to remember to set
> mapreduce.job.acl-modify-job and mapreduce.job.acl-view-job.
> Extract from mapred-default.xml:
> bq. Irrespective of this ACL configuration, (a) job-owner, (b) the user who
> started the cluster, (c) members of an admin configured supergroup configured
> via mapreduce.cluster.permissions.supergroup and *(d) queue administrators of
> the queue to which this job was submitted* to configured via
> acl-administer-jobs for the specific queue in mapred-queues.xml can do all
> the view operations on a job.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
