[
https://issues.apache.org/jira/browse/RANGER-1885?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Velmurugan Periasamy updated RANGER-1885:
-----------------------------------------
Fix Version/s: (was: 1.1.0)
> Remove implied grant for the administer queue permission for the Yarn plugin
> ----------------------------------------------------------------------------
>
> Key: RANGER-1885
> URL: https://issues.apache.org/jira/browse/RANGER-1885
> Project: Ranger
> Issue Type: Bug
> Components: plugins
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Priority: Major
>
> This task is to remove the implied grant for the administer queue permission
> for the Yarn plugin. Previously, the administer queue permission implied the
> submit application permission. However, this implication can cause problems
> when a user is denied the administer queue permission, but explicitly allowed
> the submit application permission, as the administer queue negative
> permission then overrides the positive submit application permission (see
> https://issues.apache.org/jira/browse/RANGER-1339). The easiest fix is just
> to remove the implied grant, so a user must be explicitly granted the submit
> application permission in addition to administer queue.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
