Mailing-List: contact user-help@kylin.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@kylin.apache.org
MIME-Version: 1.0
From: Marek Wiewiorka <marek.wiewiorka@gmail.com>
Date: Fri, 11 Dec 2015 15:32:28 +0100
Message-ID: 
 <CAJbo4nfF=N0=MoEdQtAvr663BiZLXqGH78HM3RZCCygA2yEKyw@mail.gmail.com>
Subject: Kylin authorization and roles/LDAP
To: user@kylin.apache.org
Content-Type: multipart/alternative; boundary=001a11c3fdfebc79dd0526a0331f

--001a11c3fdfebc79dd0526a0331f
Content-Type: text/plain; charset=UTF-8

Hi All - I managed to get LDAP authentication working but I'm unable to
setup proper authorization.

Does anybody of you got it working properly - roles mapping, privileges on
cubes with LDAP?

I will summarize briefly what I wasn't able to do:
1)map a LDAP group to admin role in Kylin
2)Despite granting only one group 'cube query' privilege on a cube everyone
who is properly authenticated can query the data which is obviously wrong.

Any help more than welcome!

Marek

--001a11c3fdfebc79dd0526a0331f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi All - I managed to get LDAP authentication working but =
I&#39;m unable to setup proper authorization.<div><br></div><div>Does anybo=
dy of you got it working properly - roles mapping, privileges on cubes with=
 LDAP?</div><div><br></div><div>I will summarize briefly what I wasn&#39;t =
able to do:</div><div>1)map a LDAP group to admin role in Kylin</div><div>2=
)Despite granting only one group &#39;cube query&#39; privilege on a cube e=
veryone who is properly authenticated can query the data which is obviously=
 wrong.</div><div><br></div><div>Any help more than welcome!</div><div><br>=
</div><div>Marek</div><div><br></div><div>=C2=A0</div></div>

--001a11c3fdfebc79dd0526a0331f--