Github user tgravescs commented on the issue:

    https://github.com/apache/spark/pull/17582
  
    Sorry but I'm confused by the explanation in the description.  I didn't 
completely follow what problems you are seeing that aren't intended and I don't 
understand how you are proposing to fix.  Can you please describe the design 
you are proposing in more detail?
    
    On the description can you please clarify each of your bullets? For 
instance:
    1. if base URL's ACL (spark.acls.enable) is enabled but user A has no view 
permission. User "A" cannot see the app list but could still access details of 
it's own app.
    
    Are you saying user A is not in the list of acls or is?  if they have no 
view permission then they shouldn't be able to see the app.  I don't understnad 
what you mean by "could still access details of it's own app"?  Is this user 
A's application (meaning they started it) and hence he would automatically be 
in the acl list?
    
    Clarifying the other bullets would be helpful as well.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org

Reply via email to