[ https://issues.apache.org/jira/browse/MAPREDUCE-7293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Wanqiang Ji updated MAPREDUCE-7293: ----------------------------------- Component/s: jobhistoryserver > All pages in JHS should honor yarn.webapp.filter-entity-list-by-user > -------------------------------------------------------------------- > > Key: MAPREDUCE-7293 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-7293 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: jobhistoryserver > Reporter: Bilwa S T > Assignee: Bilwa S T > Priority: Major > > Currently only HsJobsBlock checks for the access. If user who doesn't have > permission to access job page is able to do it which is wrong. So we need to > have below check in HsJobBlock,HsTasksBlock and HsTaskPage > {code:java} > if (isFilterAppListByUserEnabled && ugi != null && !aclsManager > .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) { > > } > {code} -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org