Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-20462

Duplicate entries in DB for auto_<view>_instance privileges upon Ambari server restart

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.5.0
    • Fix Version/s: 2.5.0
    • Component/s: ambari-server
    • Labels:

      Description

      When I create a new user from Ambari UI and let’s say give him ‘Cluster User’ role; later go to Users page it shows the permissions as seen in the screenshot

      The UI display is fine, however when I make an API call like below
      /api/v1/users/tom/privileges?fields=*

      It shows three entries for each auto_<view>_instance privilege. As an example: for ‘AUTO_FILES_INSTANCE’ I see three entries like:
      api/v1/users/tom/privileges/6
      api/v1/users/tom/privileges/56
      api/v1/users/tom/privileges/106

      and so on, so we have 16 entries (One for Cluster.User + 3 * privileges for each of five View instances)

      The same behavior is seen for groups too like: /api/v1/groups/gp1/privileges?fields=*

      Example
      It is expected that only one of the following rows exists:

      ambaricustom=> select * from adminprivilege where privilege_id in (6, 56, 106);
      privilege_id | permission_id | resource_id | principal_id
      --------------+---------------+-------------+--------------
                  6 |             4 |          54 |            8
                 56 |             4 |          54 |            8
                106 |             4 |          54 |            8
      (3 rows)
      
      • permission_id (4): VIEW.USER
      • resource_id (54): AUTO_FILES_INSTANCE
      • principal_id (8): CLUSTER.USER

      Cause
      When Ambari server restarts, it installs the automatically created view instances without first checking to see if they have been previously created. Each restart of Ambari server will create a new set of duplicated records.

        Attachments

        1. AMBARI-20462_branch-2.5_01.patch
          28 kB
          Robert Levas
        2. AMBARI-20462_branch-2.5_02.patch
          29 kB
          Robert Levas
        3. AMBARI-20462_trunk_01.patch
          26 kB
          Robert Levas
        4. AMBARI-20462_trunk_02.patch
          27 kB
          Robert Levas

          Issue Links

            Activity

              People

              • Assignee:
                rlevas Robert Levas
                Reporter:
                shavi71 Vivek Sharma
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: