[jira] [Commented] (AMBARI-6852) Views: views list from API is not respecting privileges

["Mahadev konar (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-6852?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14096004#comment-14096004 ] 

Mahadev konar commented on AMBARI-6852:
---------------------------------------

+1 for the patch. Please make sure you add unit tests in a separate jira.

> Views: views list from API is not respecting privileges
> -------------------------------------------------------
>
>                 Key: AMBARI-6852
>                 URL: https://issues.apache.org/jira/browse/AMBARI-6852
>             Project: Ambari
>          Issue Type: Bug
>          Components: controller
>    Affects Versions: 1.7.0
>            Reporter: Siddharth Wagle
>            Assignee: Siddharth Wagle
>             Fix For: 1.7.0
>
>         Attachments: AMBARI-6852.patch
>
>
> 1) Create two users:
> - testuser
> - testadmin, make this user AMBARI.ADMIN
> 2) Deploy some view, an example one or files or whatever
> 3) Perform the following GET as each user:
> http://c6402.ambari.apache.org:8080/api/v1/views
> 3) All users are seeing all views, even if they don't have USE perm.



--
This message was sent by Atlassian JIRA
(v6.2#6252)