[jira] [Updated] (AMBARI-17267) Add service operation fails for Cluster Administrator due to missing permission to set users and groups

["Myroslav Papirkovskyi (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-17267?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Myroslav Papirkovskyi updated AMBARI-17267:
-------------------------------------------
    Attachment: AMBARI-17267.patch

> Add service operation fails for Cluster Administrator due to missing permission to set users and groups
> -------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-17267
>                 URL: https://issues.apache.org/jira/browse/AMBARI-17267
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.3.0
>            Reporter: Myroslav Papirkovskyi
>            Assignee: Myroslav Papirkovskyi
>            Priority: Blocker
>             Fix For: 2.4.0
>
>         Attachments: AMBARI-17267.patch
>
>
> *Steps*
> # Create a user having Cluster Administrator role
> # Login with the user created above
> # Try to Add Service (I chose Storm)
> *Result*
> Add service operation fail with error that the user is not authorized to set service user and groups
> After hitting OK, the page sometimes shows blank while other time it shows exceptions when you try to redo the operation in same wizard (see screenshots)
> *Expected Result*
> According to RBAC permissions, only admin can "set service users and groups"; however cluster_administrator can add service -- so either block cluster_admin to add service or allow him to "set service user and groups"



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)