Here is the JIRA: https://issues.apache.org/jira/browse/KYLIN-2878
Let me know if more info is needed. The basic idea is non-admin ldap group / role with full permissions to projectA should allow user in that group to edit model and sync tables within projectA. Thanks! On Sun, Sep 17, 2017 at 12:36 AM, Li Yang <[email protected]> wrote: > This is good proposal. Could a JIRA be created? > > A little history. Before KYLIN-2717 > <https://issues.apache.org/jira/browse/KYLIN-2717>, a table is global and > is shared by all projects. Only system admin can sync Hive table, as it > will have system wide impact. > > Once KYLIN-2717 <https://issues.apache.org/jira/browse/KYLIN-2717> is > done, tables are isolated by project, we will be ready to grant table > permissions to project level admin. > > On Sun, Sep 17, 2017 at 6:23 AM, Sonny Heer <[email protected]> wrote: > >> Kylin versions is 1.6 >> >> Is there a way to give full access to a project? Currently we are able >> to give access to a project via ROLE in ldap, but that doesn't allow user >> to sync/load hive tables (the blue buttons are missing). Also unable to >> edit model. In order to give that permission we have to edit group to add >> kylin-admins, but then user has full access to all projects. >> >> Question: >> >> when only allowing a custom ROLE access to projectA - shouldn't the user >> be able to load tables/ edit models? >> >> Thanks >> > >
