[AMBARI-16177] Views: User should be able to assign permission of a view instance to cluster roles

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.4.0
• Component/s: ambari-views
• Assignee: DIPAYAN BHOWMICK
• Reporter: DIPAYAN BHOWMICK
• Created: 29/Apr/16 07:03
• Updated: 04/May/16 12:33
• Resolved: 03/May/16 17:44

Description

Currently, "USE" permission for users + groups needs to manually mapped by an Ambari Admin for each view instance.
In cases where a view can be auto-configured for a locally managed cluster and we expect that view to be available to that same users that have Cluster Operator or other role access to that cluster, we need to provide an option for Ambari Admins to inherit USE permission on view instances from the cluster permissions. This means:

• Any user or group with different role on the cluster will also get USE access on the view instance.
• This should be available in-addition-to specific view USE permission mapping
• This should be available from Ambari Administration interface and optional set during <auto-create>
• Views like Capacity Scheduler and Tez UI should be adjusted to use this feature for their auto-create instances

Issue Links

• blocks: AMBARI-16246 Allow roles to be treated like principals in Ambari DB
• blocks: AMBARI-16247 Authorizations given to role-based principals must be dereferenced upon user login
• links to: Review Board Link