[AMBARI-17177] Add SERVICE.VIEW_OPERATIONAL_LOGS authorization to SERVICE.ADMINISTRATOR role and above

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Labels: rbac
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 11/Jun/16 10:29
• Updated: 14/Jun/16 14:26
• Resolved: 14/Jun/16 14:26

Description

Add SERVICE.VIEW_OPERATIONAL_LOGS authorization to the following roles:

• AMBARI.ADMINISTRATOR
• CLUSTER.ADMINISTRATOR
• CLUSTER.OPERATOR
• SERVICE.ADMINISTRATOR

This is a DB change adding an authorization record to the roleauthorization table and relevant records for the different roles to the permission_roleauthorization table.

The description/name of the SERVICE.VIEW_OPERATIONAL_LOGS authorization should be

View service operational logs

Issue Links

• links to: ReviewBoard