[jira] [Created] (AMBARI-14320) Enforce granular role-based access control for configuration functions

["Myroslav Papirkovskyy (JIRA)" <ji...@apache.org>]

Myroslav Papirkovskyy created AMBARI-14320:
----------------------------------------------

             Summary: Enforce granular role-based access control for configuration functions
                 Key: AMBARI-14320
                 URL: https://issues.apache.org/jira/browse/AMBARI-14320
             Project: Ambari
          Issue Type: Task
          Components: ambari-server
    Affects Versions: 2.4.0
            Reporter: Myroslav Papirkovskyy
            Assignee: Myroslav Papirkovskyy
            Priority: Critical
             Fix For: 2.4.0


Enforce granular role-based access control for configuration functions:

|| || Cluster\\User || Service\\Operator || Service\\Administrator || Cluster\\Operator || Cluster\\Administrator || Administrator ||
|View service configurations           |(+)|(+)|(+)|(+)|(+)|(+)|
|Compare service configurations        |(+)|(+)|(+)|(+)|(+)|(+)|
|Manage configuration groups   |   |   |(+)|(+)|(+)|(+)|
|View host configuration            |(+)|(+)|(+)|(+)|(+)|(+)|
|View cluster configuration            |(+)|(+)|(+)|(+)|(+)|(+)|

Entry points affected:
- GET /api/v1/clusters/:clusterId/configurations
- POST /api/v1/clusters/:clusterId/configurations
- GET /api/v1/clusters/:clusterId/configurations/service_config_versions
- GET /api/v1/clusters/:clusterId/config_groups
- GET /api/v1/clusters/:clusterId/config_groups/:groupId
- POST /api/v1/clusters/:clusterId/config_groups
- PUT /api/v1/clusters/:clusterId/config_groups/:groupId
- DELETE /api/v1/clusters/:clusterId/config_groups/:groupId



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)