[
https://issues.apache.org/jira/browse/YARN-6842?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16098594#comment-16098594
]
YunFan Zhou commented on YARN-6842:
-----------------------------------
[~bibinchundatt]
Thanks bibin, But your solution can not meet our requirements completely.
The shortcomings are as follows：
1. For some users, we may always want them view our applications.
If we do that by setting ApplicationAccessType#VIEW_APP acl rights in
containerLaunchContext,
we should always set it. This is very boring and redundant.
And at other hand, administrator can authorize VIEW_APP permissions to other
users.
This privilege is independent of the submitter's authority.
It can be understood that this is an authorization that is different from an
administrator but more than a regular user.
2. It can not authorize users to view a submitted applications.
All in all, we should implement a new access type for queue.
> Implement a new access type for queue
> -------------------------------------
>
> Key: YARN-6842
> URL: https://issues.apache.org/jira/browse/YARN-6842
> Project: Hadoop YARN
> Issue Type: Improvement
> Components: scheduler
> Affects Versions: 2.8.2
> Reporter: YunFan Zhou
> Assignee: YunFan Zhou
> Fix For: 2.8.2
>
> Attachments: YARN-6842.001.patch, YARN-6842.002.patch,
> YARN-6842.003.patch
>
>
> When we want to access applications of a queue, only we can do is become the
> administer of the queue at present.
> But sometimes we only want authorize someone view applications of a queue
> but not modify operation.
> In our current mechanism there isn't any way to meet it, so I will implement
> a new access type for queue to solve
> this problem.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org
