You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-dev@hadoop.apache.org by "Bilwa S T (Jira)" <ji...@apache.org> on 2020/08/14 18:39:00 UTC

[jira] [Created] (MAPREDUCE-7293) All pages in JHS should honor yarn.webapp.filter-entity-list-by-user

Bilwa S T created MAPREDUCE-7293:
------------------------------------

             Summary: All pages in JHS should honor yarn.webapp.filter-entity-list-by-user
                 Key: MAPREDUCE-7293
                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-7293
             Project: Hadoop Map/Reduce
          Issue Type: Bug
            Reporter: Bilwa S T
            Assignee: Bilwa S T


Currently only HsJobsBlock checks for the access. If user who doesn't have permission to access job page is able to do it which is wrong. So we need to have below check in HsJobBlock,HsTasksBlock and HsTaskPage

{code:java}
      if (isFilterAppListByUserEnabled && ugi != null && !aclsManager
          .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) {
        
      }
{code}




--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: mapreduce-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: mapreduce-dev-help@hadoop.apache.org