Uploaded image for project: 'CDAP'
  1. CDAP
  2. CDAP-12336

create stream through UI in new auth model is not working

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.3.0
    • Component/s: UI
    • Labels:
    • Rank:
      1|hzy0u1:vz9i

      Description

      Now in the new auth model, user need ADMIN privilege to create the stream and WRITE privilege to send event to the stream. If someone with only ADMIN privilege tries to create the stream through UI(without uploading any data), UI seems to make a creation call and a send event call to the backend. We will have this message showed: "Principal 'Principal

      {name='alice', type=USER, kerberosPrincipal=null}

      ' is not authorized to perform action 'WRITE' on entity 'stream:test.testStream'". But if you refresh the page, the stream is created. If you do the creation through cli, we will see "Successfully created stream with ID 'testStream'".

        Attachments

          Activity

            People

            • Assignee:
              ajai Ajai Narayan
              Reporter:
              yaojie Yaojie Feng
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: