[AMBARI-6679] Add Cluster Privilege Resource

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.7.0
• Assignee: Tom Beerbower
• Reporter: Tom Beerbower
• Created: 30/Jul/14 16:26
• Updated: 31/Jul/14 13:43
• Resolved: 31/Jul/14 13:43

Description

Add a cluster privilege resource provider so that privileges may be assigned to cluster instances. See BUG-18967 for view instance privileges.
TODO :

1. Add resource_id column to clusters
2. Add resource entity relationship to ClusterEntity
3. Insert associated resource row in DB when cluster is created.
4. Update existing cluster rows in DB with associated resource relationship.
5. Add cluster privilege service for API framework.
6. Add cluster privilege resource provider.
7. Adjust unit tests.

API:

To grant privileges to access the cluster we can create a privilege sub-resource for the cluster instance. The following API will grant CLUSTER.READ permission to the user 'bob' for the cluster instance 'c1'.

    POST http://<server>/api/v1/clusters/c1
   
    [
      {
        "PrivilegeInfo" : {
          "permission_name" : "CLUSTER.READ",
          "principal_name" : "bob",
          "principal_type" : "USER"
        }
      }
    ]

Issue Links

• links to: Code review and patch