[
https://issues.apache.org/jira/browse/YARN-4522?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16099555#comment-16099555
]
Bibin A Chundatt commented on YARN-4522:
----------------------------------------
[~jianhe]
One clarification regarding this change .
If {{YARN_ACL_ENABLE}} if false , {{ClientRMService#getQueueUserAcls}} result
and submission check are not in sync. IIUC {{ClientRMService#getQueueUserAcls}}
returns the effective ACL for queue, if queue ACL shows submit permission is
not available for user then submission should fail.
For example default queue {{getQueueUserAcls}} effective will show no rights to
submit application but will be able to submit application.
IMHO we should keep both in sync.
> Queue acl can be checked at app submission
> ------------------------------------------
>
> Key: YARN-4522
> URL: https://issues.apache.org/jira/browse/YARN-4522
> Project: Hadoop YARN
> Issue Type: Bug
> Reporter: Jian He
> Assignee: Jian He
> Fix For: 2.9.0, 3.0.0-alpha1
>
> Attachments: YARN-4522.1.patch, YARN-4522.2.patch, YARN-4522.3.patch,
> YARN-4522.4.patch
>
>
> Queue acl check is currently asynchronously done at
> CapacityScheduler#addApplication, this could be done right at submission.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
