Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-14298

Change authorization resource Id to be adminresource id

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • 2.3.0
    • 2.3.0
    • ambari-server

    Description

      The RBAC changes attempt to perform authorization checks on resource-specific identifiers. This is not the intended use of the authorization (admin*/auth*) tables as the resource's adminresource id is to be looked up and an authorization check is to be performed on that.

      Attachments

        1. AMBARI-14298_trunk_03.patch
          88 kB
          Robert Levas
        2. AMBARI-14298_trunk_02.patch
          75 kB
          Robert Levas
        3. AMBARI-14298_trunk_01.patch
          75 kB
          Robert Levas

        Issue Links

          Activity

            People

              rlevas Robert Levas
              rlevas Robert Levas
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: