[jira] [Commented] (AMBARI-21687) User can't add node via Ambari UI when being part of both "cluster user" and "cluster admin" roles

["Hadoop QA (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-21687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16150922#comment-16150922 ] 

Hadoop QA commented on AMBARI-21687:
------------------------------------

{color:red}-1 overall{color}.  Here are the results of testing the latest attachment 
  http://issues.apache.org/jira/secure/attachment/12884957/AMBARI-21687.patch
  against trunk revision .

    {color:green}+1 @author{color}.  The patch does not contain any @author tags.

    {color:green}+1 tests included{color}.  The patch appears to include 1 new or modified test files.

    {color:green}+1 release audit{color}.  The applied patch does not increase the total number of release audit warnings.

    {color:green}+1 javac{color}.  The applied patch does not increase the total number of javac compiler warnings.

    {color:red}-1 core tests{color}.  The test build failed in [ambari-server|https://builds.apache.org/job/Ambari-trunk-test-patch/12139//artifact/patch-work/testrun_ambari-server.txt] 

Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/12139//console

This message is automatically generated.

> User can't add node via Ambari UI when being part of both "cluster user" and "cluster admin" roles
> --------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-21687
>                 URL: https://issues.apache.org/jira/browse/AMBARI-21687
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-sever
>    Affects Versions: 2.5.1
>            Reporter: Amogh Patel
>            Assignee: Eugene Chekanskiy
>             Fix For: 2.6.0
>
>         Attachments: AMBARI-21687.patch
>
>
> User can't add node via Ambari UI when being part of both *cluster user* and *cluster administrator* roles.
> *Issue1:* The expected behavior of Ambari is to not allow same user/group to be part of 2 different roles and it WARNS that *Cannot save permissions.. Only 1 role allowed per user or group* but this can be fooled by creating two different groups and have a common user, which creates Issue2.
> *Issue2:* Due to above, user (part of cluster user and cluster admin) can't add node and Ambari UI goes in loop during node registration process and reloads the page again and again.
> Reproduced it with Ambari 2.5.1. Steps to reproduce:
> 1. Created group *foogroup* and user *foo1* and added it in *foogroup*.
> 2. Tried to add *foogroup* to roles cluster user and administrator and it doesn't allow with above warning.
> 3. Created a local user *test1* in Ambari.
> 4. Created 2 different group *clus_admin* and *cluster_user* and added *test1* in both of them.
> 5. Assigned *clus_admin* to cluster admin role and *clus_user* to cluster user role and was able to save and assign 2 different roles to same user.
> 6. Tried to add a new node with *test1* user and Ambari UI freaks out while registration and goes on loop.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)