[AMBARI-14341] Enforce granular role-based access control for ldap-sync functions

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Labels: rbac
• Epic Link: Ambari role-based access control
• Assignee: Papirkovskyy Myroslav
• Reporter: Papirkovskyy Myroslav
• Created: 11/Dec/15 13:01
• Updated: 14/Dec/15 23:08
• Resolved: 14/Dec/15 19:49

Description

Enforce granular role-based access control for ldap sync functions:

	Cluster User	Service Operator	Service Administrator	Cluster Operator	Cluster Administrator	Administrator
Sync LDAP users
Sync LDAP groups

Entry points affected:
GET /api/v1/ldap_sync_events
POST /api/v1/ldap_sync_events
DELETE /api/v1/ldap_sync_events/:event_id

Issue Links

• is duplicated by: AMBARI-14195 Enforce granular role-based access control for configuration functions
• is duplicated by: AMBARI-14198 Enforce granular role-based access control for ldap-sync functions
• links to: ReviewBoard