[jira] [Updated] (RANGER-1885) Remove implied grant for the administer queue permission for the Yarn plugin
[ https://issues.apache.org/jira/browse/RANGER-1885?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Velmurugan Periasamy updated RANGER-1885: - Fix Version/s: (was: 1.1.0) > Remove implied grant for the administer queue permission for the Yarn plugin > > > Key: RANGER-1885 > URL: https://issues.apache.org/jira/browse/RANGER-1885 > Project: Ranger > Issue Type: Bug > Components: plugins >Reporter: Colm O hEigeartaigh >Assignee: Colm O hEigeartaigh >Priority: Major > > This task is to remove the implied grant for the administer queue permission > for the Yarn plugin. Previously, the administer queue permission implied the > submit application permission. However, this implication can cause problems > when a user is denied the administer queue permission, but explicitly allowed > the submit application permission, as the administer queue negative > permission then overrides the positive submit application permission (see > https://issues.apache.org/jira/browse/RANGER-1339). The easiest fix is just > to remove the implied grant, so a user must be explicitly granted the submit > application permission in addition to administer queue. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Updated] (RANGER-1885) Remove implied grant for the administer queue permission for the Yarn plugin
[ https://issues.apache.org/jira/browse/RANGER-1885?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Velmurugan Periasamy updated RANGER-1885: - Fix Version/s: (was: 1.0.0) 1.1.0 > Remove implied grant for the administer queue permission for the Yarn plugin > > > Key: RANGER-1885 > URL: https://issues.apache.org/jira/browse/RANGER-1885 > Project: Ranger > Issue Type: Bug > Components: plugins >Reporter: Colm O hEigeartaigh >Assignee: Colm O hEigeartaigh >Priority: Major > Fix For: 1.1.0 > > > This task is to remove the implied grant for the administer queue permission > for the Yarn plugin. Previously, the administer queue permission implied the > submit application permission. However, this implication can cause problems > when a user is denied the administer queue permission, but explicitly allowed > the submit application permission, as the administer queue negative > permission then overrides the positive submit application permission (see > https://issues.apache.org/jira/browse/RANGER-1339). The easiest fix is just > to remove the implied grant, so a user must be explicitly granted the submit > application permission in addition to administer queue. -- This message was sent by Atlassian JIRA (v7.6.3#76005)
