[ 
https://issues.apache.org/jira/browse/YARN-7967?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Yufei Gu updated YARN-7967:
---------------------------
    Description: 
[~wilfreds] mentioned that:
{quote}
Queue ACLs work bottom up. The first check is made at the leaf queue. If the 
ACL at that level does not allow access we go up one level and check that 
level. That process is repeated until we hit the top in the form of the root 
queue. If at any level we are allowed to submit or administer then the action 
is allowed and we stop reversing up the tree.
{quote}

Bottom up is a surprise behavior. Most queue related checking works top down. 
We should add this into Fair Scheduler Doc. In addition, maybe link the doc to 
Java Doc of AllocationFileLoaderService#getDefaultPermissions so that it won't 
be too confusing. 

  was:
Wilfred mentioned that:
{quote}
Queue ACLs work bottom up. The first check is made at the leaf queue (in the 
example above q2). If the ACL at that level does not allow access we go up one 
level (here q1) and check that level. That process is repeated until we hit the 
top in the form of the root queue. If at any level we are allowed to submit or 
administer then the action is allowed and we stop reversing up the tree.
{quote}

Bottom up is a surprise behavior. Most queue related checking works top down. 
We should add this into Fair Scheduler Doc. In addition, maybe link the doc to 
Java Doc of AllocationFileLoaderService#getDefaultPermissions so that it won't 
be too confusing. 


> Better doc and Java doc for Fair Scheduler Queue ACL
> ----------------------------------------------------
>
>                 Key: YARN-7967
>                 URL: https://issues.apache.org/jira/browse/YARN-7967
>             Project: Hadoop YARN
>          Issue Type: Improvement
>          Components: fairscheduler
>    Affects Versions: 3.1.0
>            Reporter: Yufei Gu
>            Priority: Major
>              Labels: newbie
>
> [~wilfreds] mentioned that:
> {quote}
> Queue ACLs work bottom up. The first check is made at the leaf queue. If the 
> ACL at that level does not allow access we go up one level and check that 
> level. That process is repeated until we hit the top in the form of the root 
> queue. If at any level we are allowed to submit or administer then the action 
> is allowed and we stop reversing up the tree.
> {quote}
> Bottom up is a surprise behavior. Most queue related checking works top down. 
> We should add this into Fair Scheduler Doc. In addition, maybe link the doc 
> to Java Doc of AllocationFileLoaderService#getDefaultPermissions so that it 
> won't be too confusing. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org

Reply via email to