[HDDS-6670] [MultiTenancy] Assign admin should not default to delegated admin

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: HDDS-4944
• Component/s: Ozone Manager
• Labels: ozone-multitenancy
• Assignee: Siyao Meng
• Reporter: Soumitra Sulav
• Created: 29/Apr/22 17:00
• Updated: 29/May/22 17:37
• Resolved: 27/May/22 12:21

Description

Ozone Tenant User API for Assign admin has delegated admin defaulted to True.

 

This is making all the new admins as delegated admins with the privilege to assign more admins.

I probably believe delegated admin privilege should not have defaulted.

Also, there is no option currently to create a non-delegated admin.

Whether we pass -d or not its always delegated

bash-4.2$ ozone tenant user assign-admin -t tenantone 'tenantone$hrt_qa' -d
Assigned admin to 'tenantone$hrt_qa' in tenant 'tenantone'