[jira] [Created] (AMBARI-6627) Views : Admin - Add custom permissions

["Tom Beerbower (JIRA)" <ji...@apache.org>]

Tom Beerbower created AMBARI-6627:
-------------------------------------

             Summary: Views : Admin - Add custom permissions
                 Key: AMBARI-6627
                 URL: https://issues.apache.org/jira/browse/AMBARI-6627
             Project: Ambari
          Issue Type: Task
            Reporter: Tom Beerbower
            Assignee: Tom Beerbower
             Fix For: 1.7.0


Add support for custom view privileges as described in the Admin doc ...

https://docs.google.com/a/hortonworks.com/document/d/1heCrAA6hNM8qvQ091f8KGICABw2pY6Pt25uyfAvV8SQ/edit?disco=AAAAAJqU6lg#

Custom view permissions must be specified in the view descriptor.  There is no API support for creating and deleting custom permissions for a view.

For example …

{code}
<view>
 <name>PIG_VIEW</name>
 <label>The Pig View</label>
 <version>1.0.0</version>
 …
 <permission>
   <name>EXECUTE</name>
   <description>
     Enables the grantee to execute a script.
    </description>
 </permission>
 <permission>
   <name>EDIT</name>
   <description>
     Enables the grantee to edit a script.
    </description>
 </permission>
 …
</view>
{code}

The above view.xml would result in the following custom permissions …

*VIEW.PIG_VIEW1.0.0.EXECUTE*
Enables the grantee to execute a script

*VIEW.PIG_VIEW1.0.0.EDIT*
Enables the grantee to edit a script

Custom permissions may only be granted for resource instances of the type that they were defined for.  For example, you could not grant VIEW.PIG_VIEW1.0.0.EDIT permission to a user on the FILES_VIEW.FILES_1 view instance.





--
This message was sent by Atlassian JIRA
(v6.2#6252)