[jira] [Updated] (RANGER-1885) Remove implied grant for the administer queue permission for the Yarn plugin

["Velmurugan Periasamy (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-1885?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Velmurugan Periasamy updated RANGER-1885:
-----------------------------------------
    Fix Version/s:     (was: 1.0.0)
                   1.1.0

> Remove implied grant for the administer queue permission for the Yarn plugin
> ----------------------------------------------------------------------------
>
>                 Key: RANGER-1885
>                 URL: https://issues.apache.org/jira/browse/RANGER-1885
>             Project: Ranger
>          Issue Type: Bug
>          Components: plugins
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>            Priority: Major
>             Fix For: 1.1.0
>
>
> This task is to remove the implied grant for the administer queue permission for the Yarn plugin. Previously, the administer queue permission implied the submit application permission. However, this implication can cause problems when a user is denied the administer queue permission, but explicitly allowed the submit application permission, as the administer queue negative permission then overrides the positive submit application permission (see https://issues.apache.org/jira/browse/RANGER-1339). The easiest fix is just to remove the implied grant, so a user must be explicitly granted the submit application permission in addition to administer queue.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)