[jira] [Created] (YARN-1968) YARN Admin service should have more fine-grained ACL which is based on mapping of users with methods/operations.

["Junping Du (JIRA)" <ji...@apache.org>]

Junping Du created YARN-1968:
--------------------------------

             Summary: YARN Admin service should have more fine-grained ACL which is based on mapping of users with methods/operations.
                 Key: YARN-1968
                 URL: https://issues.apache.org/jira/browse/YARN-1968
             Project: Hadoop YARN
          Issue Type: Improvement
            Reporter: Junping Du


AdminService's operation today have different dimensions of management, some is on user management while other is on cluster management. 
Today, we only check if user belongs to some authorized group to see if he can execute operations in admin service. The result is he can either execute all operations or none which is a simple strategy but not very precisely. We may need more fine-grained ACLs which can authorized user with partial operations in AdminService.



--
This message was sent by Atlassian JIRA
(v6.2#6252)