[KYLIN-1234] Cube ACL does not work

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: v1.1, v1.1.1, v1.2
• Fix Version/s: v1.3.0, v1.4.0
• Component/s: REST Service
• Assignee: Shao Feng Shi
• Reporter: Marek Wiewiorka
• Created: 15/Dec/15 13:53
• Updated: 14/Mar/16 01:54
• Resolved: 07/Mar/16 03:15

Description

Steps to reproduce the issue:
1)Create a user in the LDAP not assigning it to any group
2)User is not able to log in the Web UI - since it's not a member of any default group, nor a member of admin group.
3)User can however query any cube using REST api.
==
I would expect that unless a user or group has CUBE_QUERY priv granted it should not be allowed to view the data.