Example: Killing an application in the "Production" queue
Provide the privilege to a user to kill an application in a specific queue.
For this Application ACL evaluation flow example, assume the following for
application_1536220066338_0001
running in the
queue "Production":- Application owner: John
- "Datascience" queue administrator: Jane
- YARN cluster administrator: Bob
In this use case, John attempts to kill the application, which is allowed because he is the application owner.
Working as the queue administrator, Jane attempts to kill a job in the queue "Production", which she can do as the queue administrator of the parent queue.
Bob is the YARN cluster administrator and he is also listed as a user in the Admin ACL. He attempts to kill the job for which he is not the owner, but because he is the YARN cluster administrator, he can kill the job.