[AMBARI-15370] Login as regular user (no cluster access at all) but background ops are running about cluster

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.4.0
• Component/s: ambari-web
• Assignee: Antonenko Alexander
• Reporter: Antonenko Alexander
• Created: 10/Mar/16 13:43
• Updated: 11/Mar/16 18:53
• Resolved: 11/Mar/16 12:53

Description

I created a local user and did not give them access to any cluster.

Logged in and notice that Ambari Web is making calls to backend about cluster items (hosts, alerts, etc).

The calls come back 403 since this user doesn't have access to cluster resources but these calls are not necessary overhead, and in case of real problems, errors like this will confuse real errors.