Hello Gilman,

I found a way to have it working. I give view data and modify data policies to 
my user too.

Nifi 1.0.0  was working without this setting and using nifi-1.1.1 need it.


What are the differences between 1.0.0 and 1.1.1 about this point ?

________________________________
From: Matt Gilman <[email protected]>
Sent: Tuesday, January 10, 2017 3:43:46 PM
To: [email protected]
Subject: Re: nifi 1.1.1 : Unable to empty queues

If your instance is clustered, you'll need to authorize the nodes with the data 
policies as well. Any 'data-plane' endpoint (where data or meta-data is 
returned or modified) will require the nodes in the request chain to also be 
approved for access as the data will traverse some of them when the request is 
replicated. 'Control-plane' endpoints (where data flow configuration is 
retrieved/modified) are not subject to the additional check.

FYI, there was a recent improvement committed the master branch that provides 
some level of details regarding the insufficient privileges. This should make 
it into the next release (1.2.0).

Matt

On Tue, Jan 10, 2017 at 9:36 AM, Alessio Palma 
<[email protected]<mailto:[email protected]>> wrote:

Hello all,
I'm checking nifi 1.1.1 before moving it to production and something weird is 
happening when I try to empty a queue.
System replies telling I'm unable to perform the desired action due to 
insufficient permissions. My user has any available rule.
What can I check ?
Any suggestions?

Thanks in advance for your time.




Reply via email to