[AMBARI-15543] RBAC based user access to view instances are not honoured

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Labels: rbac security
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 23/Mar/16 21:49
• Updated: 25/Mar/16 00:21
• Resolved: 24/Mar/16 20:11

Description

Problem:
1. Create a cluster
2. Create some view instances in amber
3. Create a local non-admin ambari user
4. Grant the newly created user access to one of the view instances

Log-in with the non-admin user. The user should only see the view instances it has permission instead of all view instances.

This seems to have been introduced by https://issues.apache.org/jira/browse/AMBARI-14194

Issue Links

• links to: ReviewBoard