diff options
| author | Thomas Graves <tgraves@apache.org> | 2014-04-24 18:38:10 -0700 |
|---|---|---|
| committer | Patrick Wendell <pwendell@gmail.com> | 2014-04-24 18:38:10 -0700 |
| commit | 44da5ab2dea6dcf1e13d624784741141883870bb (patch) | |
| tree | 5796dcff85959cdd2670d196c9cdfb64c22dc517 /docs/monitoring.md | |
| parent | 4660991e679eda158a3ae8039b686eae197a71d1 (diff) | |
| download | spark-44da5ab2dea6dcf1e13d624784741141883870bb.tar.gz spark-44da5ab2dea6dcf1e13d624784741141883870bb.tar.bz2 spark-44da5ab2dea6dcf1e13d624784741141883870bb.zip | |
Spark 1489 Fix the HistoryServer view acls
This allows the view acls set by the user to be enforced by the history server. It also fixes filters being applied properly.
Author: Thomas Graves <tgraves@apache.org>
Closes #509 from tgravescs/SPARK-1489 and squashes the following commits:
869c186 [Thomas Graves] change to either acls enabled or disabled
0d8333c [Thomas Graves] Add history ui policy to allow acls to either use application set, history server force acls on, or off
65148b5 [Thomas Graves] SPARK-1489 Fix the HistoryServer view acls
Diffstat (limited to 'docs/monitoring.md')
| -rw-r--r-- | docs/monitoring.md | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/docs/monitoring.md b/docs/monitoring.md index 347a9b1f1a..6f35fc37c4 100644 --- a/docs/monitoring.md +++ b/docs/monitoring.md @@ -115,6 +115,19 @@ represents an application's event logs. This creates a web interface at Location of the kerberos keytab file for the History Server. </td> </tr> + <tr> + <td>spark.history.ui.acls.enable</td> + <td>false</td> + <td> + Specifies whether acls should be checked to authorize users viewing the applications. + If enabled, access control checks are made regardless of what the individual application had + set for <code>spark.ui.acls.enable</code> when the application was run. The application owner + will always have authorization to view their own application and any users specified via + <code>spark.ui.view.acls</code> when the application was run will also have authorization + to view that application. + If disabled, no access control checks are made. + </td> + </tr> </table> Note that in all of these UIs, the tables are sortable by clicking their headers, |