| Table of Contents |
|---|
...
| Operation | REST API | Body | Response | CLI Command (from Security CLI commands) | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| create role | PUT /security/authorization/roles/create/<role-name> | N/A | 200: Created the role 409: role already exists | create role <role-name> | ||||||||||||
| delete role | DELETE /security/authorization/roles/delete/<role-name> | N/A | 200: Deleted the role 404: role is not found | drop role <role-name> | ||||||||||||
| add role to principal | POST PUT /security/authorization/<principal-type>/<principal-name>/roles/<role-name>/add |
| 200: Added principal to role 404: role | 200: Added role to principal 404: role not found 404: principal not found | add role <role-name> to group/user <group/user-name> | |||||||||||
| remove role from principal | DELETE /security/authorization/<principal-type>/<principal-name>/roles/<role-name>/remove| Code Block | | ||||||||||||||
|
| 200: removed role from principal from role 404: role not found 404: principal not found | remove role <role-name> from group/user <group/user-name> | |||||||||||||
| List roles | GET /security/authorization/roles/ | N/A | 200: List of roles
| list roles | ||||||||||||
| List roles for principal | GET /security/authorization/<principal-type>/<principal-name>/roles | N/ principal |
| A | 200: List of roles
404: Principal not found | list roles for group/user <group/user-name> | ||||||||||
| List privileges for role | GET /security/roleauthorization/roles/<role-name>/privileges privileges | N/A | 200: List of privileges for the role
404: role not found | list privileges for role <role-name> |
ACL management
There are multiple options for ACL Management. For dataset-based authorizer, we will have to support ACL Management via the CDAP CLI.
...