Package org.apache.hadoop.yarn.server.resourcemanager.security

Class GenericQueueACLsManager

java.lang.Object

org.apache.hadoop.yarn.server.resourcemanager.security.QueueACLsManager

org.apache.hadoop.yarn.server.resourcemanager.security.GenericQueueACLsManager

public class GenericQueueACLsManager
extends QueueACLsManager

This is the generic implementation of QueueACLsManager.

Constructor Summary

Constructors

Constructor	Description
GenericQueueACLsManager(ResourceScheduler scheduler, org.apache.hadoop.conf.Configuration conf)

Method Summary

Modifier and Type	Method	Description
boolean	checkAccess(org.apache.hadoop.security.UserGroupInformation callerUGI, org.apache.hadoop.yarn.api.records.QueueACL acl, RMApp app, java.lang.String remoteAddress, java.util.List<java.lang.String> forwardedAddresses)
boolean	checkAccess(org.apache.hadoop.security.UserGroupInformation callerUGI, org.apache.hadoop.yarn.api.records.QueueACL acl, RMApp app, java.lang.String remoteAddress, java.util.List<java.lang.String> forwardedAddresses, java.lang.String targetQueue)	Check access to a targetQueue in the case of a move of an application.

Methods inherited from class org.apache.hadoop.yarn.server.resourcemanager.security.QueueACLsManager

getQueueACLsManager

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GenericQueueACLsManager

public GenericQueueACLsManager(ResourceScheduler scheduler,
                               org.apache.hadoop.conf.Configuration conf)

Method Detail

checkAccess

public boolean checkAccess(org.apache.hadoop.security.UserGroupInformation callerUGI,
                           org.apache.hadoop.yarn.api.records.QueueACL acl,
                           RMApp app,
                           java.lang.String remoteAddress,
                           java.util.List<java.lang.String> forwardedAddresses)

Specified by:

checkAccess in class QueueACLsManager

checkAccess

public boolean checkAccess(org.apache.hadoop.security.UserGroupInformation callerUGI,
                           org.apache.hadoop.yarn.api.records.QueueACL acl,
                           RMApp app,
                           java.lang.String remoteAddress,
                           java.util.List<java.lang.String> forwardedAddresses,
                           java.lang.String targetQueue)

Description copied from class: QueueACLsManager

Check access to a targetQueue in the case of a move of an application. The application cannot contain the destination queue since it has not been moved yet, thus need to pass it in separately.

Specified by:

checkAccess in class QueueACLsManager

Parameters:

callerUGI - the caller UGI

acl - the acl for the Queue to check

app - the application to move

remoteAddress - server ip address

forwardedAddresses - forwarded adresses

targetQueue - the name of the queue to move the application to

Returns:

true: if submission is allowed and queue exists, false: in all other cases (also non existing target queue)