[AMBARI-13814] Add (descriptive) label to permission resource and database schema

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 2.3.0
• Component/s: ambari-server, ambari-web
• Labels: rbac
• Epic Link: Ambari role-based access control
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 10/Nov/15 15:08
• Updated: 11/Nov/15 22:58
• Resolved: 11/Nov/15 20:01

Description

Add (descriptive) label to permission resource and database schema to avoid having to hardcode a descriptive name for a permission. For example:

Permission Name	Permission Label
VIEW.USER	View User
CLUSTER.USER	Cluster User
SERVICE.OPERATOR	Service Operator
SERVICE.ADMINISTRATOR	Service Administrator
CLUSTER.OPERATOR	Cluster Operator
CLUSTER.ADMINISTRATOR	Cluster Administrator

This descriptive label can be used in user interfaces so that a descriptive (or friendly) name does not have to be hardcoded.

API Call Example

GET api/v1/permissions/1

200 OK
{
  "href" : "http://your.ambari.server/api/v1/permissions/1",
  "PermissionInfo" : {
    "permission_id" : 1,
    "permission_name" : "AMBARI.ADMIN",
    "permission_label" : "Administrator",
    "resource_name" : "AMBARI"
  }
}

Issue Links

• links to: ReviewBoard