Colm O hEigeartaigh created RANGER-1885:
-------------------------------------------
Summary: Remove implied grant for the administer queue permission
for the Yarn plugin
Key: RANGER-1885
URL: https://issues.apache.org/jira/browse/RANGER-1885
Project: Ranger
Issue Type: Bug
Components: plugins
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: 1.0.0
This task is to remove the implied grant for the administer queue permission
for the Yarn plugin. Previously, the administer queue permission implied the
submit application permission. However, this implication can cause problems
when a user is denied the administer queue permission, but explicitly allowed
the submit application permission, as the administer queue negative permission
then overrides the positive submit application permission (see
https://issues.apache.org/jira/browse/RANGER-1339). The easiest fix is just to
remove the implied grant, so a user must be explicitly granted the submit
application permission in addition to administer queue.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
