[jira] [Commented] (MAPREDUCE-7293) All pages in JHS should honor yarn.webapp.filter-entity-list-by-user

["Bilwa S T (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MAPREDUCE-7293?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17230764#comment-17230764 ] 

Bilwa S T commented on MAPREDUCE-7293:
--------------------------------------

Resolving this issue as jobACL info was null because client didn't enable acl. 

> All pages in JHS should honor yarn.webapp.filter-entity-list-by-user
> --------------------------------------------------------------------
>
>                 Key: MAPREDUCE-7293
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-7293
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>          Components: jobhistoryserver
>            Reporter: Bilwa S T
>            Assignee: Bilwa S T
>            Priority: Major
>
> Currently only HsJobsBlock checks for the access. If user who doesn't have permission to access job page is able to do it which is wrong. So we need to have below check in HsJobBlock,HsTasksBlock and HsTaskPage
> {code:java}
>       if (isFilterAppListByUserEnabled && ugi != null && !aclsManager
>           .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) {
>         
>       }
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: mapreduce-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: mapreduce-issues-help@hadoop.apache.org