[AMBARI-26052] UI : Cluster User has Permission to click on Recover host operations

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: ambari-web
• Assignee: Unassigned
• Reporter: Satheesh Akuthota
• Created: 21/Feb/24 11:45
• Updated: 21/Feb/24 12:28

Description

1. Create a Cluster
2. create a Cluster User
3. login with cluster User
4. go to hosts-> select a host -> host actions -> click on recover host

In logs It is throwing exceptions:

Caused by: org.apache.ambari.server.security.authorization.AuthorizationException: The authenticated user is not authorized to change the state of service components
	at org.apache.ambari.server.controller.internal.HostComponentResourceProvider.updateHostComponents(HostComponentResourceProvider.java:643)
	at org.apache.ambari.server.controller.internal.HostComponentResourceProvider$4.invoke(HostComponentResourceProvider.java:857)

2024-02-21 11:32:00,485 ERROR [ExecutionScheduler_Worker-5] AbstractLinearExecutionJob:88 - Exception caught on execution of job LinearExecutionJobs.BatchRequestJob-6-1. Exiting linear chain...
org.apache.ambari.server.AmbariException: Exception occurred while performing request
	at org.apache.ambari.server.scheduler.ExecutionScheduleManager.executeBatchRequest(ExecutionScheduleManager.java:546)
	at org.apache.ambari.server.state.scheduler.BatchRequestJob.doWork(BatchRequestJob.java:80)
	at org.apache.ambari.server.scheduler.AbstractLinearExecutionJob.execute(AbstractLinearExecutionJob.java:86)
	at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
	at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573)
Caused by: java.lang.NullPointerException
	at org.apache.ambari.server.scheduler.ExecutionScheduleManager.convertToBatchRequestResponse(ExecutionScheduleManager.java:635)
	at org.apache.ambari.server.scheduler.ExecutionScheduleManager.performApiRequest(ExecutionScheduleManager.java:692)
	at org.apache.ambari.server.scheduler.ExecutionScheduleManager.executeBatchRequest(ExecutionScheduleManager.java:536)
	... 4 more

we can remove Recover host action for Cluster USER in Ambari UI