[
https://issues.apache.org/jira/browse/AMBARI-14192?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-14192:
----------------------------------
Description:
Enforce granular role-based access control for service functions:
|| || Cluster\\User || Service\\Operator || Service\\Administrator ||
Cluster\\Operator || Cluster\\Administrator || Administrator ||
|Start/Stop/Restart Service | |(+)|(+)|(+)|(+)|(+)|
|Decommission/recommission | |(+)|(+)|(+)|(+)|(+)|
|Run service checks | |(+)|(+)|(+)|(+)|(+)|
|Turn on/off maintenance mode | |(+)|(+)|(+)|(+)|(+)|
|Perform service-specific tasks| |(+)|(+)|(+)|(+)|(+)|
|Move to another host | | |(+)|(+)|(+)|(+)|
|Enable HA | | |(+)|(+)|(+)|(+)|
|Add Service to cluster | | | | |(+)|(+)|
|Install components | | | |(+)|(+)|(+)|
|Set service users and groups | | | | | |(+)|
Entry points affected:
* GET /api/v1/clusters/:cluster_name/services
* GET /api/v1/clusters/:cluster_name/services/:service_name
* POST /api/v1/clusters/:cluster_name/services/:service_name
* PUT /api/v1/clusters/:cluster_name/services/:service_name
* DELETE /api/v1/clusters/:cluster_name/services/:service_name
* GET /api/v1/clusters/:cluster_name/services/:service_name/components
* GET
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* POST
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* PUT
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* DELETE
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* POST /api/v1/clusters/:cluster_name/hosts
* POST /api/v1/clusters/:cluster_name/requests
was:
Enforce granular role-based access control for service functions:
|| || Cluster\\User || Service\\Operator || Service\\Administrator ||
Cluster\\Operator || Cluster\\Administrator || Administrator ||
|Start/Stop/Restart Service | |(+)|(+)|(+)|(+)|(+)|
|Decommission/recommission | |(+)|(+)|(+)|(+)|(+)|
|Run service checks | |(+)|(+)|(+)|(+)|(+)|
|Turn on/off maintenance mode | |(+)|(+)|(+)|(+)|(+)|
|Perform service-specific tasks| |(+)|(+)|(+)|(+)|(+)|
|Move to another host | | |(+)|(+)|(+)|(+)|
|Enable HA | | |(+)|(+)|(+)|(+)|
|Add Service to cluster | | | | |(+)|(+)|
|Install components | | | |(+)|(+)|(+)|
|Set service users and groups | | | | | |(+)|
Entry points affected:
* GET /api/v1/clusters/:cluster_name/services
* GET /api/v1/clusters/:cluster_name/services/:service_name
* POST /api/v1/clusters/:cluster_name/services/:service_name
* PUT /api/v1/clusters/:cluster_name/services/:service_name
* DELETE /api/v1/clusters/:cluster_name/services/:service_name
* GET /api/v1/clusters/:cluster_name/services/:service_name/components
* GET
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* POST
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* PUT
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* DELETE
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
* POST /api/v1/clusters/:cluster_name/hosts
* POST /api/v1/clusters/:cluster_name/hosts
> Enforce granular role-based access control for service functions
> ----------------------------------------------------------------
>
> Key: AMBARI-14192
> URL: https://issues.apache.org/jira/browse/AMBARI-14192
> Project: Ambari
> Issue Type: Task
> Components: ambari-server
> Affects Versions: 2.4.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Labels: rbac
> Fix For: 2.4.0
>
>
> Enforce granular role-based access control for service functions:
> || || Cluster\\User || Service\\Operator || Service\\Administrator ||
> Cluster\\Operator || Cluster\\Administrator || Administrator ||
> |Start/Stop/Restart Service | |(+)|(+)|(+)|(+)|(+)|
> |Decommission/recommission | |(+)|(+)|(+)|(+)|(+)|
> |Run service checks | |(+)|(+)|(+)|(+)|(+)|
> |Turn on/off maintenance mode | |(+)|(+)|(+)|(+)|(+)|
> |Perform service-specific tasks| |(+)|(+)|(+)|(+)|(+)|
> |Move to another host | | |(+)|(+)|(+)|(+)|
> |Enable HA | | |(+)|(+)|(+)|(+)|
> |Add Service to cluster | | | | |(+)|(+)|
> |Install components | | | |(+)|(+)|(+)|
> |Set service users and groups | | | | | |(+)|
> Entry points affected:
> * GET /api/v1/clusters/:cluster_name/services
> * GET /api/v1/clusters/:cluster_name/services/:service_name
> * POST /api/v1/clusters/:cluster_name/services/:service_name
> * PUT /api/v1/clusters/:cluster_name/services/:service_name
> * DELETE /api/v1/clusters/:cluster_name/services/:service_name
> * GET /api/v1/clusters/:cluster_name/services/:service_name/components
> * GET
> /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
> * POST
> /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
> * PUT
> /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
> * DELETE
> /api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
> * POST /api/v1/clusters/:cluster_name/hosts
> * POST /api/v1/clusters/:cluster_name/requests
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
