Bilwa S T created MAPREDUCE-7293:
------------------------------------

             Summary: All pages in JHS should honor 
yarn.webapp.filter-entity-list-by-user
                 Key: MAPREDUCE-7293
                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-7293
             Project: Hadoop Map/Reduce
          Issue Type: Bug
            Reporter: Bilwa S T
            Assignee: Bilwa S T


Currently only HsJobsBlock checks for the access. If user who doesn't have 
permission to access job page is able to do it which is wrong. So we need to 
have below check in HsJobBlock,HsTasksBlock and HsTaskPage

{code:java}
      if (isFilterAppListByUserEnabled && ugi != null && !aclsManager
          .checkAccess(ugi, JobACL.VIEW_JOB, job.getUserName(), null)) {
        
      }
{code}




--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: mapreduce-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: mapreduce-dev-h...@hadoop.apache.org

Reply via email to