[ 
https://issues.apache.org/jira/browse/MAPREDUCE-7293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Wanqiang Ji updated MAPREDUCE-7293:
-----------------------------------
    Component/s: jobhistoryserver

> All pages in JHS should honor yarn.webapp.filter-entity-list-by-user
> --------------------------------------------------------------------
>
>                 Key: MAPREDUCE-7293
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-7293
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: jobhistoryserver
>            Reporter: Bilwa S T
>            Assignee: Bilwa S T
>            Priority: Major
>
> Currently only HsJobsBlock checks for the access. If user who doesn't have 
> permission to access job page is able to do it which is wrong. So we need to 
> have below check in HsJobBlock,HsTasksBlock and HsTaskPage
> {code:java}
>       if (isFilterAppListByUserEnabled && ugi != null && !aclsManager
>           .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) {
>         
>       }
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org

Reply via email to