Details
-
Task
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
Add authorizations to permissions so that the definition of a permission (or role) is explicit.
A new table needs to be created to store the authorizations:
TABLE roleauthorization ( authorization_id VARCHAR(100) NOT NULL, authorization_name VARCHAR(255) NOT NULL, resource_type_id INTEGER NOT NULL, PRIMARY KEY(authorization_id) )
A new table needs to be added to map authorizations to permissions
TABLE permission_roleauthorization ( permission_id BIGINT NOT NULL, authorization_id VARCHAR(100) NOT NULL, PRIMARY KEY(permission_id, authorization_id) );
A new Entity needs to be created to hold the authorization record data (org.apache.ambari.server.orm.entities.AuthorizationEntity).
The existing PermissionEntity org.apache.ambari.server.orm.entities.PermissionEntity needs to be updated to include AuthorizationEntities.