[jira] [Commented] (YARN-4522) Queue acl can be checked at app submission

["Bibin A Chundatt (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/YARN-4522?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16099555#comment-16099555 ] 

Bibin A Chundatt commented on YARN-4522:
----------------------------------------

[~jianhe]

One clarification regarding this change .

If {{YARN_ACL_ENABLE}} if false , {{ClientRMService#getQueueUserAcls}} result and submission check are not in sync. IIUC {{ClientRMService#getQueueUserAcls}} returns the effective ACL for queue, if queue ACL shows submit permission is not available for user then submission should fail.

For example default queue {{getQueueUserAcls}} effective will show no rights to submit application but will be able to submit application.
IMHO we should keep both in sync.

> Queue acl can be checked at app submission
> ------------------------------------------
>
>                 Key: YARN-4522
>                 URL: https://issues.apache.org/jira/browse/YARN-4522
>             Project: Hadoop YARN
>          Issue Type: Bug
>            Reporter: Jian He
>            Assignee: Jian He
>             Fix For: 2.9.0, 3.0.0-alpha1
>
>         Attachments: YARN-4522.1.patch, YARN-4522.2.patch, YARN-4522.3.patch, YARN-4522.4.patch
>
>
> Queue acl check is currently asynchronously done at CapacityScheduler#addApplication, this could be done right at submission.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org