[AMBARI-24562] Protect the ClusterConfig resource so that only authorized users may have read-only access the data

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.7.3
• Component/s: ambari-server
• Labels: pull-request-available rbac
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 29/Aug/18 17:27
• Updated: 22/Oct/18 21:00
• Resolved: 30/Aug/18 20:22

Description

Protect the ClientConfig resource so that only authorized users may have read-only access the data.

Users with the following permission should have read-only access:

• CLUSTER.VIEW_CONFIGS
• SERVICE.VIEW_CONFIGS
• HOST.VIEW_CONFIGS

These permissions should be allow for the following roles:

• AMBARI.ADMINISTRATOR
• CLUSTER.ADMINISTRATOR
• CLUSTER.OPERATOR
• SERVICE.ADMINISTRATOR
• SERVICE.OPERATOR
• CLUSTER.USER

Users with no role related to the cluster may not view the data.

Example REST API entry point:

GET /api/v1/clusters/cl1/services/HDFS/components/HDFS_CLIENT?format=client_config_tar

Issue Links

• links to: GitHub Pull Request #2205
• links to: GitHub Pull Request #2206