You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@livy.apache.org by "Alex Ang Hock Hee (Jira)" <ji...@apache.org> on 2021/09/16 09:36:00 UTC

[jira] [Updated] (LIVY-868) ACL on livy session listing

     [ https://issues.apache.org/jira/browse/LIVY-868?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Ang Hock Hee updated LIVY-868:
-----------------------------------
    Description: 
With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that do not have view access should not be able to see others' jobs even at the listing page. Referencing yarn: https://issues.apache.org/jira/browse/YARN-7157

However, users are able to see the other users' sessions at the UI page, although they are unable to navigate in to see more details.

The sessions should be filtered before sending the list to the UI.

Pull request at https://github.com/apache/incubator-livy/pull/329

 

  was:
With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that do not have view access should not be able to see others' jobs even at the listing page. Referencing yarn: https://issues.apache.org/jira/browse/YARN-7157

However, users are able to see the other users' sessions at the UI page, although they are unable to navigate in to see more details.

The sessions should be filtered before sending the list to the UI.

 


> ACL on livy session listing
> ---------------------------
>
>                 Key: LIVY-868
>                 URL: https://issues.apache.org/jira/browse/LIVY-868
>             Project: Livy
>          Issue Type: Improvement
>          Components: Server
>    Affects Versions: 0.7.0
>            Reporter: Alex Ang Hock Hee
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> With ACL enabled (https://issues.apache.org/jira/browse/LIVY-348), users that do not have view access should not be able to see others' jobs even at the listing page. Referencing yarn: https://issues.apache.org/jira/browse/YARN-7157
> However, users are able to see the other users' sessions at the UI page, although they are unable to navigate in to see more details.
> The sessions should be filtered before sending the list to the UI.
> Pull request at https://github.com/apache/incubator-livy/pull/329
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)