[jira] [Created] (AMBARI-11983) yarn acl related properties are open to everyone (*) for secure cluster

["Vitaly Brodetskyi (JIRA)" <ji...@apache.org>]

Vitaly Brodetskyi created AMBARI-11983:
------------------------------------------

             Summary: yarn acl related properties are open to everyone (*) for secure cluster
                 Key: AMBARI-11983
                 URL: https://issues.apache.org/jira/browse/AMBARI-11983
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.1.0
            Reporter: Vitaly Brodetskyi
            Assignee: Vitaly Brodetskyi
            Priority: Blocker
             Fix For: 2.1.0


In capacity-scheduler.xml, the followings are set by default and it is too open for secure cluster:
{noformat}
<property>
<name>yarn.scheduler.capacity.root.acl_administer_queue</name>
<value>*</value>
</property>
<property>
<name>yarn.scheduler.capacity.root.default.acl_administer_jobs</name>
<value>*</value>
</property>
<property>
<name>yarn.scheduler.capacity.root.default.acl_submit_applications</name>
<value>*</value>
</property>
{noformat}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)