Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-16177

Views: User should be able to assign permission of a view instance to cluster roles

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.2.0
    • 2.4.0
    • ambari-views
    • None

    Description

      Currently, "USE" permission for users + groups needs to manually mapped by an Ambari Admin for each view instance.
      In cases where a view can be auto-configured for a locally managed cluster and we expect that view to be available to that same users that have Cluster Operator or other role access to that cluster, we need to provide an option for Ambari Admins to inherit USE permission on view instances from the cluster permissions. This means:

      • Any user or group with different role on the cluster will also get USE access on the view instance.
      • This should be available in-addition-to specific view USE permission mapping
      • This should be available from Ambari Administration interface and optional set during <auto-create>
      • Views like Capacity Scheduler and Tez UI should be adjusted to use this feature for their auto-create instances

      Attachments

        1. AMBARI-16177.trunk.patch
          135 kB
          DIPAYAN BHOWMICK
        2. AMBARI-16177.2.trunk.patch
          146 kB
          DIPAYAN BHOWMICK

        Issue Links

          Activity

            hadoopqa Hadoop QA added a comment -

            +1 overall. Here are the results of testing the latest attachment
            http://issues.apache.org/jira/secure/attachment/12801412/AMBARI-16177.trunk.patch
            against trunk revision .

            +1 @author. The patch does not contain any @author tags.

            +1 tests included. The patch appears to include 15 new or modified test files.

            +1 javac. The applied patch does not increase the total number of javac compiler warnings.

            +1 release audit. The applied patch does not increase the total number of release audit warnings.

            +1 core tests. The patch passed unit tests in ambari-admin ambari-server.

            Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/6723//testReport/
            Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/6723//console

            This message is automatically generated.

            hadoopqa Hadoop QA added a comment - +1 overall . Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12801412/AMBARI-16177.trunk.patch against trunk revision . +1 @author . The patch does not contain any @author tags. +1 tests included . The patch appears to include 15 new or modified test files. +1 javac . The applied patch does not increase the total number of javac compiler warnings. +1 release audit . The applied patch does not increase the total number of release audit warnings. +1 core tests . The patch passed unit tests in ambari-admin ambari-server. Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/6723//testReport/ Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/6723//console This message is automatically generated.

            Updated Patch to make changes related to groups.

            dipayanb DIPAYAN BHOWMICK added a comment - Updated Patch to make changes related to groups.

            Committed to trunk.

            dipayanb DIPAYAN BHOWMICK added a comment - Committed to trunk.
            hudson Hudson added a comment -

            FAILURE: Integrated in Ambari-trunk-Commit #4782 (See https://builds.apache.org/job/Ambari-trunk-Commit/4782/)
            AMBARI-16177. Views: User should be able to assign permission of a view (dipayan.bhowmick: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=4342a6b7eb6eed781d879c46435acc9f0ea8c981)

            • ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AuthorizationHelperInitializer.java
            • ambari-server/src/main/java/org/apache/ambari/server/controller/internal/GroupPrivilegeResourceProvider.java
            • ambari-admin/src/main/resources/ui/admin-web/app/views/ambariViews/edit.html
            • ambari-server/src/main/java/org/apache/ambari/server/controller/internal/UserPrivilegeResourceProvider.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/UserPrivilegeResourceProviderTest.java
            • ambari-server/src/main/resources/Ambari-DDL-Postgres-EMBEDDED-CREATE.sql
            • ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/PermissionLoader.js
            • ambari-admin/src/main/resources/ui/admin-web/app/styles/main.css
            • ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
            • ambari-server/src/main/java/org/apache/ambari/server/orm/entities/PrincipalEntity.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/HostResourceProviderTest.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertResourceProviderTest.java
            • ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/Group.js
            • ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AuthorizationHelperTest.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertHistoryResourceProviderTest.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/GroupPrivilegeResourceProviderTest.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ComponentResourceProviderTest.java
            • ambari-server/src/main/resources/Ambari-DDL-Postgres-CREATE.sql
            • ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/View.js
            • ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/PermissionsSaver.js
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/RequestResourceProviderTest.java
            • ambari-server/src/main/java/org/apache/ambari/server/orm/entities/PrincipalTypeEntity.java
            • ambari-server/src/main/java/org/apache/ambari/server/security/authorization/ClusterInheritedPermissionHelper.java
            • ambari-server/src/main/resources/Ambari-DDL-SQLServer-CREATE.sql
            • ambari-server/src/test/java/org/apache/ambari/server/view/configuration/AutoInstanceConfigTest.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertGroupResourceProviderTest.java
            • ambari-server/src/main/java/org/apache/ambari/server/controller/ControllerModule.java
            • ambari-server/src/main/java/org/apache/ambari/server/orm/dao/PrincipalDAO.java
            • ambari-server/src/test/java/org/apache/ambari/server/controller/metrics/ganglia/GangliaPropertyProviderTest.java
            • ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java
            • ambari-server/src/main/resources/Ambari-DDL-MySQL-CREATE.sql
            • ambari-server/src/main/resources/Ambari-DDL-Oracle-CREATE.sql
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertDefinitionResourceProviderTest.java
            • ambari-server/src/main/resources/Ambari-DDL-Derby-CREATE.sql
            • ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
            • ambari-admin/src/main/resources/ui/admin-web/app/scripts/controllers/ambariViews/ViewsEditCtrl.js
            • ambari-server/src/test/java/org/apache/ambari/server/controller/metrics/JMXPropertyProviderTest.java
            • ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java
            • ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AuthorizationHelper.java
            • ambari-server/src/main/java/org/apache/ambari/server/view/configuration/AutoInstanceConfig.java
            • ambari-server/src/main/resources/Ambari-DDL-SQLAnywhere-CREATE.sql
            • ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertNoticeResourceProviderTest.java
            • ambari-server/src/main/java/org/apache/ambari/server/controller/internal/PrivilegeResourceProvider.java
            • ambari-admin/src/main/resources/ui/admin-web/app/scripts/i18n.config.js
            • ambari-server/src/main/java/org/apache/ambari/server/view/ViewRegistry.java
            hudson Hudson added a comment - FAILURE: Integrated in Ambari-trunk-Commit #4782 (See https://builds.apache.org/job/Ambari-trunk-Commit/4782/ ) AMBARI-16177 . Views: User should be able to assign permission of a view (dipayan.bhowmick: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=4342a6b7eb6eed781d879c46435acc9f0ea8c981 ) ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AuthorizationHelperInitializer.java ambari-server/src/main/java/org/apache/ambari/server/controller/internal/GroupPrivilegeResourceProvider.java ambari-admin/src/main/resources/ui/admin-web/app/views/ambariViews/edit.html ambari-server/src/main/java/org/apache/ambari/server/controller/internal/UserPrivilegeResourceProvider.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/UserPrivilegeResourceProviderTest.java ambari-server/src/main/resources/Ambari-DDL-Postgres-EMBEDDED-CREATE.sql ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/PermissionLoader.js ambari-admin/src/main/resources/ui/admin-web/app/styles/main.css ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java ambari-server/src/main/java/org/apache/ambari/server/orm/entities/PrincipalEntity.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/HostResourceProviderTest.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertResourceProviderTest.java ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/Group.js ambari-server/src/test/java/org/apache/ambari/server/security/authorization/AuthorizationHelperTest.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertHistoryResourceProviderTest.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/GroupPrivilegeResourceProviderTest.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ComponentResourceProviderTest.java ambari-server/src/main/resources/Ambari-DDL-Postgres-CREATE.sql ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/View.js ambari-admin/src/main/resources/ui/admin-web/app/scripts/services/PermissionsSaver.js ambari-server/src/test/java/org/apache/ambari/server/controller/internal/RequestResourceProviderTest.java ambari-server/src/main/java/org/apache/ambari/server/orm/entities/PrincipalTypeEntity.java ambari-server/src/main/java/org/apache/ambari/server/security/authorization/ClusterInheritedPermissionHelper.java ambari-server/src/main/resources/Ambari-DDL-SQLServer-CREATE.sql ambari-server/src/test/java/org/apache/ambari/server/view/configuration/AutoInstanceConfigTest.java ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertGroupResourceProviderTest.java ambari-server/src/main/java/org/apache/ambari/server/controller/ControllerModule.java ambari-server/src/main/java/org/apache/ambari/server/orm/dao/PrincipalDAO.java ambari-server/src/test/java/org/apache/ambari/server/controller/metrics/ganglia/GangliaPropertyProviderTest.java ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java ambari-server/src/main/resources/Ambari-DDL-MySQL-CREATE.sql ambari-server/src/main/resources/Ambari-DDL-Oracle-CREATE.sql ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertDefinitionResourceProviderTest.java ambari-server/src/main/resources/Ambari-DDL-Derby-CREATE.sql ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java ambari-admin/src/main/resources/ui/admin-web/app/scripts/controllers/ambariViews/ViewsEditCtrl.js ambari-server/src/test/java/org/apache/ambari/server/controller/metrics/JMXPropertyProviderTest.java ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java ambari-server/src/main/java/org/apache/ambari/server/security/authorization/AuthorizationHelper.java ambari-server/src/main/java/org/apache/ambari/server/view/configuration/AutoInstanceConfig.java ambari-server/src/main/resources/Ambari-DDL-SQLAnywhere-CREATE.sql ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AlertNoticeResourceProviderTest.java ambari-server/src/main/java/org/apache/ambari/server/controller/internal/PrivilegeResourceProvider.java ambari-admin/src/main/resources/ui/admin-web/app/scripts/i18n.config.js ambari-server/src/main/java/org/apache/ambari/server/view/ViewRegistry.java

            People

              dipayanb DIPAYAN BHOWMICK
              dipayanb DIPAYAN BHOWMICK
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: