[jira] [Commented] (YARN-2307) Capacity scheduler user only ADMINISTER_QUEUE also can submit app

[tangjunjie (JIRA)]

    [ 
https://issues.apache.org/jira/browse/YARN-2307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14065840#comment-14065840
 ] 

tangjunjie commented on YARN-2307:
----------------------------------

Queue acls for user : root
Queue Operations
=====================
root 
default 
china ADMINISTER_QUEUE
unfunded

I think  if root user can submit job ,hadoop queue -showacls will display as 
follow:


Queue acls for user : root
Queue Operations
=====================
root 
default 
china ADMINISTER_QUEUE    SUBMIT_APPLICATIONS
unfunded


This is my config detail :

<configuration>
 <property>
    <name>yarn.scheduler.capacity.root.queues</name>
    <value>unfunded,china,default</value>
  </property>
  
  <property>
    <name>yarn.scheduler.capacity.root.capacity</name>
    <value>100</value>
  </property>

  <property>
    <name>yarn.scheduler.capacity.root.acl_submit_applications</name>
    <value>jj</value>
  </property>
 <property>
    <name>yarn.scheduler.capacity.root.acl_administer_queue</name>
    <value>jj</value>
  </property>

  <property>
    <name>yarn.scheduler.capacity.root.unfunded.acl_submit_applications</name>
    <value>xjj</value>
  </property>
 <property>
    <name>yarn.scheduler.capacity.root.unfunded.acl_administer_queue</name>
    <value>xjj</value>
  </property>
 <property>
    <name>yarn.scheduler.capacity.root.china.acl_submit_applications</name>
    <value>china1</value>
  </property>

 <property>
    <name>yarn.scheduler.capacity.root.china.acl_administer_queue</name>
    <value>china,root</value>
  </property>

  
  <property>
    <name>yarn.scheduler.capacity.root.unfunded.capacity</name>
    <value>40</value>
  </property>
  
  <property>
    <name>yarn.scheduler.capacity.root.china.capacity</name>
    <value>50</value>
  </property>
<property>
    <name>yarn.scheduler.capacity.root.default.capacity</name>
    <value>10</value>
  </property>
</configuration>



> Capacity scheduler user only ADMINISTER_QUEUE also can submit app 
> ------------------------------------------------------------------
>
>                 Key: YARN-2307
>                 URL: https://issues.apache.org/jira/browse/YARN-2307
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: capacityscheduler
>    Affects Versions: 2.3.0
>         Environment: hadoop 2.3.0  centos6.5  jdk1.7
>            Reporter: tangjunjie
>            Priority: Minor
>
> Queue acls for user :  root
> Queue  Operations
> =====================
> root  
> default  
> china  ADMINISTER_QUEUE
> unfunded 
> user root only have ADMINISTER_QUEUE  but user root can sumbit app to
> china queue....



--
This message was sent by Atlassian JIRA
(v6.2#6252)