[jira] [Updated] (YARN-5554) MoveApplicationAcrossQueues does not check user permission on the target queue

["Wilfred Spiegelenburg (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/YARN-5554?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wilfred Spiegelenburg updated YARN-5554:
----------------------------------------
    Attachment: YARN-5554.12.patch

Updated patch:
- rebased to make sure it still applies to trunk after YARN-5932
- In ClientRMService added the missing space before the pipes
- Added a comment to the QueueACLsManager.checkAccess() to explain the versions and the scheduler dependency
- Added \@Override in TestClientRMService.getQueueAclManager() and TestClientRMService.createClientRMServiceForMoveApplicationRequest()
- removed the suppress warnings annotations (not needed after rebase)

The other two remarks I have left for the backport to branch-2:
- problems with Java 7 and the non-final parameters being used inside the anonymous inner class (yes it exists)
- suppress warnings annotation should not be needed after YARN-5932

I will log a new jira to work on the change for the QueueACLsManager.

> MoveApplicationAcrossQueues does not check user permission on the target queue
> ------------------------------------------------------------------------------
>
>                 Key: YARN-5554
>                 URL: https://issues.apache.org/jira/browse/YARN-5554
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: resourcemanager
>    Affects Versions: 2.7.2
>            Reporter: Haibo Chen
>            Assignee: Wilfred Spiegelenburg
>              Labels: oct16-medium
>         Attachments: YARN-5554.10.patch, YARN-5554.11.patch, YARN-5554.12.patch, YARN-5554.2.patch, YARN-5554.3.patch, YARN-5554.4.patch, YARN-5554.5.patch, YARN-5554.6.patch, YARN-5554.7.patch, YARN-5554.8.patch, YARN-5554.9.patch
>
>
> moveApplicationAcrossQueues operation currently does not check user permission on the target queue. This incorrectly allows one user to move his/her own applications to a queue that the user has no access to



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org