[ 
https://issues.apache.org/jira/browse/YARN-2307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14064760#comment-14064760
 ] 

Sunil G commented on YARN-2307:
-------------------------------

By default, SUBMIT_APPLICATIONS at root queue level can take "*" as default [If 
not configured]. 
So any user job submission in child queue will pass. I think its a config issue 
(if so can mark this as invalid), if not pls share config details. 


> Capacity scheduler user only ADMINISTER_QUEUE also can submit app 
> ------------------------------------------------------------------
>
>                 Key: YARN-2307
>                 URL: https://issues.apache.org/jira/browse/YARN-2307
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: capacityscheduler
>    Affects Versions: 2.3.0
>         Environment: hadoop 2.3.0  centos6.5  jdk1.7
>            Reporter: tangjunjie
>            Priority: Minor
>
> Queue acls for user :  root
> Queue  Operations
> =====================
> root  
> default  
> china  ADMINISTER_QUEUE
> unfunded 
> user root only have ADMINISTER_QUEUE  but user root can sumbit app to
> china queue....



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to