[AMBARI-14072] Enforce granular role-based access control for cluster functions

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3.0
• Fix Version/s: 2.3.0
• Component/s: ambari-server
• Labels: rbac
• Epic Link: Ambari role-based access control
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 25/Nov/15 16:10
• Updated: 04/Dec/15 02:52
• Resolved: 03/Dec/15 23:47

Description

Enforce granular role-based access control for cluster functions:

	Cluster User	Service Operator	Service Administrator	Cluster Operator	Cluster Administrator	Administrator
View status information
View configuration
View stack version details
Enable/disable Kerberos
Upgrade/downgrade stack
Create new clusters
Rename clusters

Entry points affected:

• PUT /api/v1/clusters/:cluster_name
• POST /api/v1/clusters/:cluster_name

Note: Read-only requests (GET) are not protected so that the front end is not broken.

Issue Links

• links to: ReviewBoard