Aleksandr Gaev

Add strict access control validation for scheduler commands

4

Issue: https://github.com/ytsaurus/ytsaurus/issues/1213. Part 4 where we introduce a feature flag to enforce strict access control validation for scheduler commands This PR adds a feature flag `strict_scheduler_commands_access_validation` which fixes access control...

Currently every operation is visible to every user. Access control for them is implemented partially for some APIs like `get-job-stderr` We need to implement full access control for operations and...

CLI can't set-user-password in non-interactive way

3

`yt set-user-password` command has only interactive mode and can't be used in scripts. We need to a way to use it in scripts. For example, by allowing --password argument that...

Currently, logging in CLI and python client is configured via 3 variables: `YT_LOG_LEVEL`, `YT_LOG_PATTERN ` and `YT_LOG_PATH`. [Documentation](https://ytsaurus.tech/docs/en/api/python/userdoc#configuration_logging) This makes it impossible to write logs in different levels to different...

UI allows changing account quota, and it does some validation and some logic on UI side. This validation is different from what backend does. See this issue: https://github.com/ytsaurus/ytsaurus-ui/issues/640 UI wants...

Creating nodes with `acl` attribute requires `administer` permission in parent directory

1

Hi! Consider the following scenario: 1. A directory `//home/directory` - It allows `read`, `write`, `remove` and `modify_children` for this directory and it's descendants(`object_and_descendants`) to user - It allows `administer` for...

[24.2] Introduce Weighted Fair Share ThreadPool IO engine

1

First PR to 24.1: https://github.com/ytsaurus/ytsaurus/pull/877 Second PR to 23.2: https://github.com/ytsaurus/ytsaurus/pull/995 Introduce Weighted Fair Share ThreadPool IO engine This PR introduces a new IOEngine: `WeightedFairShareThreadPool`. Using this engine improves fairness of...

AlterQuery resets access control for a query to `[]` if it wasn't specified by a user How to reproduce: ``` $ yt start-query yql 'select 1' b1e807e8-3a07eb9-33cc2cee-27af1a17 $ yt get-query...

An example of an error we saw: ``` { "code": 1102, "message": "Resource usage overdraft occurred", "attributes": { "pid": 1, "tid": 12773775614869160000, "thread": "Job", "fid": 18446106235045345000, "host": "our-host", "datetime": "2025-02-14T13:26:26.562777Z",...

Introduce Weighted Fair Share ThreadPool IO engine Previous PR to 24.1: https://github.com/ytsaurus/ytsaurus/pull/877 with some comments This PR introduces a new IOEngine: `WeightedFairShareThreadPool`. Using this engine improves fairness of disk usage...