Zhong,Jason created KYLIN-1365:
----------------------------------
Summary: Kylin ACL enhancement
Key: KYLIN-1365
URL: https://issues.apache.org/jira/browse/KYLIN-1365
Project: Kylin
Issue Type: Improvement
Affects Versions: v2.0
Reporter: Zhong,Jason
Assignee: Zhong,Jason
Now we have Project,Cube to manage,
we can grant permission or role to Project,Cube,
Admin or owner can grant permission to others.
For Project Instance,
if permission is granted to Role, user who has the role can access the project.
if permission is granted to User, user who is granted can access the project.
if Project Permission is granted,the cubes under project will inherit the
permission.
like if you grant CUBE_QUERY permission on project to user,then user can
query all Cube under this project.
For Cube Instance
if you grant cube permission to Role, user who has the role can access the
cube(Query,Edit,Operation,Admin).
if you grant cube permission to user, user can accesss the cube.
System Admin can see all projects and cubes.
other user can see Project he has permission or parent Project of cubes he has
permission.
For DataModel only who create it or System Admin can edit,clone,drop it.
only Cube Query inherit from Project works now, will enable edit,and other
operation permission inherit from Project on UI.
will do more enhancement on this.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
