[jira] [Created] (AMBARI-24546) Protect the Request resource so that only authorized users may have read-only access the data

[Robert Levas (JIRA)]

Robert Levas created AMBARI-24546:
-------------------------------------

             Summary: Protect the Request resource so that only authorized 
users may have read-only access the data
                 Key: AMBARI-24546
                 URL: https://issues.apache.org/jira/browse/AMBARI-24546
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.3.0
            Reporter: Robert Levas
            Assignee: Robert Levas
             Fix For: 2.7.2


Protect the Request resource so that only authorized users may have read-only 
access the data.

Users with the following roles should have read-only access:
* {{AMBARI.ADMINISTRATOR}}
* {{CLUSTER.ADMINISTRATOR}}
* {{CLUSTER.OPERATOR}}
* {{SERVICE.ADMINISTRATOR}}
* {{SERVICE.OPERATOR}}
* {{CLUSTER.USER}}

Users with no role related to the cluster may view the data.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)