ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Beerbower (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-6627) Views : Admin - Add custom permissions
Date Sun, 27 Jul 2014 13:33:38 GMT
Tom Beerbower created AMBARI-6627:
-------------------------------------

             Summary: Views : Admin - Add custom permissions
                 Key: AMBARI-6627
                 URL: https://issues.apache.org/jira/browse/AMBARI-6627
             Project: Ambari
          Issue Type: Task
            Reporter: Tom Beerbower
            Assignee: Tom Beerbower
             Fix For: 1.7.0


Add support for custom view privileges as described in the Admin doc ...

https://docs.google.com/a/hortonworks.com/document/d/1heCrAA6hNM8qvQ091f8KGICABw2pY6Pt25uyfAvV8SQ/edit?disco=AAAAAJqU6lg#

Custom view permissions must be specified in the view descriptor.  There is no API support
for creating and deleting custom permissions for a view.

For example …

{code}
<view>
 <name>PIG_VIEW</name>
 <label>The Pig View</label>
 <version>1.0.0</version>
 …
 <permission>
   <name>EXECUTE</name>
   <description>
     Enables the grantee to execute a script.
    </description>
 </permission>
 <permission>
   <name>EDIT</name>
   <description>
     Enables the grantee to edit a script.
    </description>
 </permission>
 …
</view>
{code}

The above view.xml would result in the following custom permissions …

*VIEW.PIG_VIEW1.0.0.EXECUTE*
Enables the grantee to execute a script

*VIEW.PIG_VIEW1.0.0.EDIT*
Enables the grantee to edit a script

Custom permissions may only be granted for resource instances of the type that they were defined
for.  For example, you could not grant VIEW.PIG_VIEW1.0.0.EDIT permission to a user on the
FILES_VIEW.FILES_1 view instance.





--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message