You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ambari.apache.org by "Siddharth Wagle (JIRA)" <ji...@apache.org> on 2014/08/13 20:44:12 UTC

[jira] [Created] (AMBARI-6852) Views: views list from API is not respecting privileges

Siddharth Wagle created AMBARI-6852:
---------------------------------------

             Summary: Views: views list from API is not respecting privileges
                 Key: AMBARI-6852
                 URL: https://issues.apache.org/jira/browse/AMBARI-6852
             Project: Ambari
          Issue Type: Bug
          Components: controller
    Affects Versions: 1.7.0
            Reporter: Siddharth Wagle
            Assignee: Siddharth Wagle
             Fix For: 1.7.0


1) Create two users:
- testuser
- testadmin, make this user AMBARI.ADMIN

2) Deploy some view, an example one or files or whatever

3) Perform the following GET as each user:
http://c6402.ambari.apache.org:8080/api/v1/views

3) All users are seeing all views, even if they don't have USE perm.





--
This message was sent by Atlassian JIRA
(v6.2#6252)