[FLINK-6454] Add more permission settings to the web UI

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Runtime / Web Frontend
• Labels: starter
• Assignee: Unassigned
• Reporter: Stephan Ewen
• Created: 04/May/17 15:42
• Updated: 23/Apr/21 13:55

Description

Currently, the web UI allows all users with access everything. Only job upload has a separate permission setting.

We should generalize that to more aspects of the UI, such as cancelling jobs, accessing logs, or accessing metrics.

We could add a flag for each feature (enable / disable).

Alternatively, we can add an access level to the UI:

1. view job only (dag, timeling, checkpoint stats)
2. view dag and metrics + logs
3. view dag/metrics/logs plus allow stop / cancel / savepoint
4. allow all (before plus submitting new jobs)

The second options is less flexible, but more compact to configure.

Issue Links

• incorporates: FLINK-8031 Provide configuration to enable/disable ability to cancel jobs in Web Frontend