[AMBARI-14320] Enforce granular role-based access control for configuration functions

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Labels: rbac
• Epic Link: Ambari role-based access control
• Assignee: Papirkovskyy Myroslav
• Reporter: Papirkovskyy Myroslav
• Created: 10/Dec/15 18:59
• Updated: 15/Dec/15 00:40
• Resolved: 15/Dec/15 00:40

Description

Enforce granular role-based access control for configuration functions:

	Cluster User	Service Operator	Service Administrator	Cluster Operator	Cluster Administrator	Administrator
View service configurations
Compare service configurations
Manage configuration groups
View host configuration
View cluster configuration

Entry points affected:

• GET /api/v1/clusters/:clusterId/configurations
• POST /api/v1/clusters/:clusterId/configurations
• GET /api/v1/clusters/:clusterId/configurations/service_config_versions
• GET /api/v1/clusters/:clusterId/config_groups
• GET /api/v1/clusters/:clusterId/config_groups/:groupId
• POST /api/v1/clusters/:clusterId/config_groups
• PUT /api/v1/clusters/:clusterId/config_groups/:groupId
• DELETE /api/v1/clusters/:clusterId/config_groups/:groupId

Issue Links

• links to: ReviewBoard