Tom Beerbower created AMBARI-6627:
-------------------------------------
Summary: Views : Admin - Add custom permissions
Key: AMBARI-6627
URL: https://issues.apache.org/jira/browse/AMBARI-6627
Project: Ambari
Issue Type: Task
Reporter: Tom Beerbower
Assignee: Tom Beerbower
Fix For: 1.7.0
Add support for custom view privileges as described in the Admin doc ...
https://docs.google.com/a/hortonworks.com/document/d/1heCrAA6hNM8qvQ091f8KGICABw2pY6Pt25uyfAvV8SQ/edit?disco=AAAAAJqU6lg#
Custom view permissions must be specified in the view descriptor. There is no
API support for creating and deleting custom permissions for a view.
For example …
{code}
<view>
<name>PIG_VIEW</name>
<label>The Pig View</label>
<version>1.0.0</version>
…
<permission>
<name>EXECUTE</name>
<description>
Enables the grantee to execute a script.
</description>
</permission>
<permission>
<name>EDIT</name>
<description>
Enables the grantee to edit a script.
</description>
</permission>
…
</view>
{code}
The above view.xml would result in the following custom permissions …
*VIEW.PIG_VIEW1.0.0.EXECUTE*
Enables the grantee to execute a script
*VIEW.PIG_VIEW1.0.0.EDIT*
Enables the grantee to edit a script
Custom permissions may only be granted for resource instances of the type that
they were defined for. For example, you could not grant
VIEW.PIG_VIEW1.0.0.EDIT permission to a user on the FILES_VIEW.FILES_1 view
instance.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
