[jira] [Commented] (HDDS-6670) [MultiTenancy] Assign admin should not be defaulted

["Siyao Meng (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HDDS-6670?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17533951#comment-17533951 ] 

Siyao Meng commented on HDDS-6670:
----------------------------------

The parameter to assign a non-delegated admin is `--delegated=false`, as currently documented on the feature branch: https://github.com/apache/ozone/blob/6044ef607dcc38b65f8accb099d3ecc6280b0d6c/hadoop-hdds/docs/content/feature/S3-Tenant-Commands.md?plain=1#L116-L122

Whether or not to add the delegated admin flag was debated, initially we didn't plan to have this delegated admin flag at all, meaning all admins would be delegated. Eventually we settled on having this option but leaving it set to delegated by default.

[~ppogde]

> [MultiTenancy] Assign admin should not be defaulted
> ---------------------------------------------------
>
>                 Key: HDDS-6670
>                 URL: https://issues.apache.org/jira/browse/HDDS-6670
>             Project: Apache Ozone
>          Issue Type: Bug
>          Components: Ozone Manager
>    Affects Versions: 1.3.0
>            Reporter: Soumitra Sulav
>            Priority: Major
>              Labels: ozone-multitenancy
>
> Ozone Tenant User API for Assign admin has delegated admin defaulted to True.
>  
> This is making all the new admins as delegated admins with the privilege to assign more admins.
> I probably believe delegated admin privilege should not have defaulted.
> Also, there is no option currently to create a non-delegated admin.
> Whether we pass -d or not its always delegated
> {code:java}
> bash-4.2$ ozone tenant user assign-admin -t tenantone 'tenantone$hrt_qa' -d
> Assigned admin to 'tenantone$hrt_qa' in tenant 'tenantone' {code}



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org