-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/41034/
-----------------------------------------------------------
(Updated Dec. 9, 2015, 9:23 a.m.)
Review request for Ambari, Jonathan Hurley, Myroslav Papirkovskyy, Nate Cole,
Sumit Mohanty, Swapan Shridhar, and Sid Wagle.
Bugs: AMBARI-14192
https://issues.apache.org/jira/browse/AMBARI-14192
Repository: ambari
Description
-------
Enforce granular role-based access control for service functions:
| Cluster User | Service Operator | Service
Administrator | Cluster Operator | Cluster Administrator | Administrator
-------------------------------|--------------|------------------|-----------------------|------------------|-----------------------|---------------
Start/Stop/Restart Service | | (+) | (+)
| (+) | (+) | (+)
Decommission/recommission | | (+) | (+)
| (+) | (+) | (+)
Run service checks | | (+) | (+)
| (+) | (+) | (+)
Turn on/off maintenance mode | | (+) | (+)
| (+) | (+) | (+)
Perform service-specific tasks | | (+) | (+)
| (+) | (+) | (+)
Move to another host | | | (+)
| (+) | (+) | (+)
Enable HA | | | (+)
| (+) | (+) | (+)
Add Service to cluster | | |
| | (+) | (+)
Install components | | |
| (+) | (+) | (+)
Modify service configurations | | | (+)
| (+) | (+) | (+)
Set service users and groups | | |
| | | (+)
Entry points affected:
- GET /api/v1/clusters/:cluster_name/services
- GET /api/v1/clusters/:cluster_name/services/:service_name
- POST /api/v1/clusters/:cluster_name/services/:service_name
- PUT /api/v1/clusters/:cluster_name/services/:service_name
- DELETE /api/v1/clusters/:cluster_name/services/:service_name
- GET /api/v1/clusters/:cluster_name/services/:service_name/components
- GET
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
- POST
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
- PUT
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
- DELETE
/api/v1/clusters/:cluster_name/services/:service_name/components/:component_name
- POST /api/v1/clusters/:cluster_name/hosts
- POST /api/v1/clusters/:cluster_name/requests
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariManagementController.java
4d7eca8
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariManagementControllerImpl.java
5f765bf
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/AbstractControllerResourceProvider.java
60b6901
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ComponentResourceProvider.java
59b5fcf
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/HostComponentResourceProvider.java
af39076
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/RequestResourceProvider.java
061b27d
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ServiceResourceProvider.java
0df2507
ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AmbariAuthorizationFilter.java
c87c338
ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AuthorizationHelper.java
e303066
ambari-server/src/main/java/org/apache/ambari/server/security/authorization/RoleAuthorization.java
1f53b06
ambari-server/src/main/java/org/apache/ambari/server/state/cluster/ClusterImpl.java
1078343
ambari-server/src/main/java/org/apache/ambari/server/topology/AmbariContext.java
d9ac183
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog220.java
f83501c
ambari-server/src/main/resources/Ambari-DDL-MySQL-CREATE.sql 5d65665
ambari-server/src/main/resources/Ambari-DDL-Oracle-CREATE.sql 7aab3f7
ambari-server/src/main/resources/Ambari-DDL-Postgres-CREATE.sql 6c56a85
ambari-server/src/main/resources/Ambari-DDL-Postgres-EMBEDDED-CREATE.sql
3413285
ambari-server/src/main/resources/Ambari-DDL-SQLAnywhere-CREATE.sql bacce35
ambari-server/src/main/resources/Ambari-DDL-SQLServer-CREATE.sql 8d44b28
ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariCustomCommandExecutionHelperTest.java
53630aa
ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariManagementControllerTest.java
9dbfcff
ambari-server/src/test/java/org/apache/ambari/server/controller/BackgroundCustomCommandExecutionTest.java
e1e9104
ambari-server/src/test/java/org/apache/ambari/server/controller/RefreshYarnCapacitySchedulerReleaseConfigTest.java
c871ec7
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ClusterResourceProviderTest.java
827f979
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ComponentResourceProviderTest.java
5fb2831
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/HostComponentResourceProviderTest.java
734bbc4
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/JMXHostProviderTest.java
36286e7
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/RequestResourceProviderTest.java
22aa124
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ServiceResourceProviderTest.java
fc0c1cc
ambari-server/src/test/java/org/apache/ambari/server/security/TestAuthenticationFactory.java
94f119c
ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AuthorizationHelperTest.java
bd1d12b
Diff: https://reviews.apache.org/r/41034/diff/
Testing (updated)
-------
Manually tested
# Local test results:
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 57:59.350s
[INFO] Finished at: Wed Dec 09 08:40:29 EST 2015
[INFO] Final Memory: 70M/1520M
[INFO] ------------------------------------------------------------------------
# Jenkins test results: PENDING
Thanks,
Robert Levas
