Bilwa S T created MAPREDUCE-7293: ------------------------------------ Summary: All pages in JHS should honor yarn.webapp.filter-entity-list-by-user Key: MAPREDUCE-7293 URL: https://issues.apache.org/jira/browse/MAPREDUCE-7293 Project: Hadoop Map/Reduce Issue Type: Bug Reporter: Bilwa S T Assignee: Bilwa S T
Currently only HsJobsBlock checks for the access. If user who doesn't have permission to access job page is able to do it which is wrong. So we need to have below check in HsJobBlock,HsTasksBlock and HsTaskPage {code:java} if (isFilterAppListByUserEnabled && ugi != null && !aclsManager .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) { } {code} -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: mapreduce-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-dev-h...@hadoop.apache.org