[AMBARI-13977] Enforce granular role-based access control for user functions

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 2.3.0
• Component/s: ambari-server
• Labels: rbac security
• Epic Link: Ambari role-based access control
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 20/Nov/15 00:32
• Updated: 25/Nov/15 15:24
• Resolved: 23/Nov/15 23:58

Description

Enforce granular role-based access control for user functions:

	Cluster User	Service Operator	Service Administrator	Cluster Operator	Cluster Administrator	Administrator
Create new clusters
Manage users
Assign permissions/roles

Entry points affected:

• GET /api/v1/users/:username
• GET /api/v1/users/:username/widget_layouts
• GET /api/v1/users/:username/privileges
• POST /api/v1/users/:username
• DELETE /api/v1/users/:username
• PUT /api/v1/users/:username
• GET /api/v1/priviliges
• POST /api/v1/priviliges
• GET /api/v1/priviliges/:privilege_id
• DELETE /api/v1/priviliges/:privilege_id
• PUT /api/v1/priviliges/:privilege_id
• GET /api/v1/clusters/:cluster_name/priviliges
• GET /api/v1/clusters/:cluster_name/priviliges/:privilege_id
• POST /api/v1/clusters/:cluster_name/priviliges
• DELETE /api/v1/clusters/:cluster_name/priviliges/:privilege_id
• PUT /api/v1/clusters/:cluster_name/priviliges/:privilege_id