[
https://issues.apache.org/jira/browse/AMBARI-21687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16152522#comment-16152522
]
Eugene Chekanskiy commented on AMBARI-21687:
--------------------------------------------
18a16cb..c51540d trunk -> trunk
46dd062..6174aff branch-2.6 -> branch-2.6
> User can't add node via Ambari UI when being part of both "cluster user" and
> "cluster admin" roles
> --------------------------------------------------------------------------------------------------
>
> Key: AMBARI-21687
> URL: https://issues.apache.org/jira/browse/AMBARI-21687
> Project: Ambari
> Issue Type: Bug
> Components: ambari-sever
> Affects Versions: 2.5.1
> Reporter: Amogh Patel
> Assignee: Eugene Chekanskiy
> Fix For: 2.6.0
>
> Attachments: AMBARI-21687-2.patch, AMBARI-21687.patch
>
>
> User can't add node via Ambari UI when being part of both *cluster user* and
> *cluster administrator* roles.
> *Issue1:* The expected behavior of Ambari is to not allow same user/group to
> be part of 2 different roles and it WARNS that *Cannot save permissions..
> Only 1 role allowed per user or group* but this can be fooled by creating two
> different groups and have a common user, which creates Issue2.
> *Issue2:* Due to above, user (part of cluster user and cluster admin) can't
> add node and Ambari UI goes in loop during node registration process and
> reloads the page again and again.
> Reproduced it with Ambari 2.5.1. Steps to reproduce:
> 1. Created group *foogroup* and user *foo1* and added it in *foogroup*.
> 2. Tried to add *foogroup* to roles cluster user and administrator and it
> doesn't allow with above warning.
> 3. Created a local user *test1* in Ambari.
> 4. Created 2 different group *clus_admin* and *cluster_user* and added
> *test1* in both of them.
> 5. Assigned *clus_admin* to cluster admin role and *clus_user* to cluster
> user role and was able to save and assign 2 different roles to same user.
> 6. Tried to add a new node with *test1* user and Ambari UI freaks out while
> registration and goes on loop.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
