big-data/hadoop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

YARN-10247. Application priority queue ACLs are not respected. Contributed by Sunil G

Browse Source 
(cherry picked from commit 410c605aec)
This commit is contained in:
Szilard Nemeth 2020-04-29 15:53:30 +02:00
parent 75433a658d
commit 8ffe1f313c
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager/src/main/java/org/apache/hadoop/yarn/server/resourcemanager/scheduler/capacity/CapacityScheduler.java
View File

@ -2686,10 +2686,10 @@ public Priority checkAndGetApplicationPriority(
} }
// Lets check for ACLs here. // Lets check for ACLs here.
if (!appPriorityACLManager.checkAccess(user, queuePath, appPriority)) { if (!appPriorityACLManager.checkAccess(user, normalizeQueueName(queuePath), appPriority)) {
throw new YarnException(new AccessControlException( throw new YarnException(new AccessControlException(
"User " + user + " does not have permission to submit/update " "User " + user + " does not have permission to submit/update "
+ applicationId + " for " + appPriority)); + applicationId + " for " + appPriority));
} }
LOG.info("Priority '" + appPriority.getPriority() LOG.info("Priority '" + appPriority.getPriority()

1
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager/src/test/java/org/apache/hadoop/yarn/server/resourcemanager/scheduler/capacity/TestApplicationPriorityACLs.java
View File

@ -143,6 +143,7 @@ private void submitAppToRMWithInValidAcl(String submitter,
.newInstance(appSubmissionContext); .newInstance(appSubmissionContext);
try { try {
submitterClient.submitApplication(submitRequest); submitterClient.submitApplication(submitRequest);
Assert.fail();
} catch (YarnException ex) { } catch (YarnException ex) {
Assert.assertTrue(ex.getCause() instanceof RemoteException); Assert.assertTrue(ex.getCause() instanceof RemoteException);
} }