hive.mako 39 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789
  1. ## Licensed to Cloudera, Inc. under one
  2. ## or more contributor license agreements. See the NOTICE file
  3. ## distributed with this work for additional information
  4. ## regarding copyright ownership. Cloudera, Inc. licenses this file
  5. ## to you under the Apache License, Version 2.0 (the
  6. ## "License"); you may not use this file except in compliance
  7. ## with the License. You may obtain a copy of the License at
  8. ##
  9. ## http://www.apache.org/licenses/LICENSE-2.0
  10. ##
  11. ## Unless required by applicable law or agreed to in writing, software
  12. ## distributed under the License is distributed on an "AS IS" BASIS,
  13. ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  14. ## See the License for the specific language governing permissions and
  15. ## limitations under the License.
  16. <%!
  17. from desktop.views import commonheader, commonfooter, _ko
  18. from django.utils.translation import ugettext as _
  19. %>
  20. <%namespace name="actionbar" file="actionbar.mako" />
  21. <%namespace name="layout" file="layout.mako" />
  22. <%namespace name="tree" file="common_tree.mako" />
  23. ${ commonheader(_('Hadoop Security'), "security", user) | n,unicode }
  24. ${ layout.menubar(section='hive1') }
  25. <script type="text/html" id="role">
  26. <div class="acl-block-title">
  27. <i class="fa fa-cube muted"></i> <a class="pointer" data-bind="click: function(){ $root.showRole($data); }"><span data-bind="text: name"></span></a>
  28. </div>
  29. <div data-bind="template: { name: 'privilege', foreach: privilegesForView }"></div>
  30. <!-- ko ifnot: $root.isApplyingBulk() -->
  31. <div class="acl-block acl-actions">
  32. <span class="pointer" data-bind="visible: privilegesForViewTo() < privileges().length, click: function(){ privilegesForViewTo(privilegesForViewTo() + 50) }" title="${ _('Show 50 more...') }"><i class="fa fa-ellipsis-h"></i></span>
  33. <span class="pointer" data-bind="click: addPrivilege, visible: $root.is_sentry_admin" title="${ _('Add privilege') }"><i class="fa fa-plus"></i></span>
  34. <span class="pointer" data-bind="click: function() { $root.list_sentry_privileges_by_authorizable() }, visible: privilegesChanged().length > 0" title="${ _('Undo') }"> &nbsp; <i class="fa fa-undo"></i></span>
  35. <span class="pointer" data-bind="click: function() { deletePrivilegeModal($data) }, visible: privilegesChanged().length > 0" title="${ _('Save') }"> &nbsp; <i class="fa fa-save"></i></span>
  36. </div>
  37. <!-- /ko -->
  38. </script>
  39. <script type="text/html" id="privilege">
  40. <div data-bind="visible: status() != 'deleted' && status() != 'alreadydeleted'" class="acl-block acl-block-airy">
  41. <!-- ko if: editing() -->
  42. <div class="pull-right privilege-actions" data-bind="visible: grantOption() || $root.is_sentry_admin">
  43. <a title="${ _('Grant this privilege') }" class="pointer" style="margin-right: 4px" data-bind="click: function(){ $root.grantToPrivilege($data); $('#grantPrivilegeModal').modal('show'); }"><i class="fa fa-send"></i></a>
  44. <a class="pointer" style="margin-right: 4px" data-bind="click: function() { if (editing()) { editing(false); }}"><i class="fa fa-eye"></i></a>
  45. <a class="pointer" style="margin-right: 4px" data-bind="click: remove"><i class="fa fa-times"></i></a>
  46. </div>
  47. <div class="inline-block" style="vertical-align: middle">
  48. <a class="pointer" style="padding-top: 4px" data-bind="click: function(){ privilegeType('db'); action($root.availableActions()[0]) }">
  49. <i class="fa fa-fw fa-1halfx muted" data-bind="css: {'fa-circle-o': privilegeType() != 'db' , 'fa-check-circle-o': privilegeType() == 'db'}"></i>
  50. </a>
  51. </div>
  52. <input type="text" data-bind="hivechooser: $data.path, enable: privilegeType() == 'db'" placeholder="dbName.tableName <CTRL+SPACE>">
  53. <div class="inline-block" style="vertical-align: middle">
  54. <a class="pointer" style="padding-top: 4px" data-bind="click: function(){ privilegeType('uri'); action('ALL'); }">
  55. <i class="fa fa-fw fa-1halfx muted" data-bind="css: {'fa-circle-o': privilegeType() != 'uri' , 'fa-check-circle-o': privilegeType() == 'uri'}"></i>
  56. </a>
  57. </div>
  58. <input type="text" data-bind="filechooser: $data.URI, enable: privilegeType() == 'uri', valueUpdate: 'afterkeydown'" placeholder="URI">
  59. <select data-bind="options: $root.availableActions, value: $data.action, enable: (privilegeType() == 'db')" style="width: 100px; margin-bottom: 0"></select>
  60. <div class="new-line-if-small">
  61. <label class="checkbox"><input type="checkbox" data-bind="checked: grantOption"> ${ _('With grant') }</label>
  62. <a class="pointer showAdvanced" data-bind="click: function(){ showAdvanced(true); }, visible: ! showAdvanced()"><i class="fa fa-cog"></i> ${ _('Show advanced') }</a>
  63. <a class="pointer showAdvanced" data-bind="click: function(){ showAdvanced(false); }, visible: showAdvanced()"><i class="fa fa-cog"></i> ${ _('Hide advanced') }</a>
  64. <div class="clearfix"></div>
  65. </div>
  66. <div class="acl-block-section" data-bind="visible: showAdvanced" style="margin-top: 0">
  67. ${ _('Server') } <input type="text" data-bind="value: serverName" placeholder="serverName" style="margin-left: 6px">
  68. </div>
  69. <!-- /ko -->
  70. <!-- ko ifnot: editing() -->
  71. <!-- ko ifnot: $root.isApplyingBulk() -->
  72. <div class="pull-right privilege-actions" data-bind="visible: grantOption() || $root.is_sentry_admin">
  73. <a title="${ _('Grant this privilege') }" class="pointer" style="margin-right: 4px" data-bind="click: function(){ $root.grantToPrivilege($data); $('#grantPrivilegeModal').modal('show'); }"><i class="fa fa-send"></i></a>
  74. <a title="${ _('Edit this privilege') }" class="pointer" style="margin-right: 4px" data-bind="visible: $root.is_sentry_admin, click: function() { if (! editing()) { editing(true); }}"><i class="fa fa-pencil"></i></a>
  75. <a title="${ _('Delete this privilege') }" class="pointer" style="margin-right: 4px" data-bind="visible: $root.is_sentry_admin, click: remove"><i class="fa fa-times"></i></a>
  76. </div>
  77. <!-- /ko -->
  78. <span class="muted" data-bind="text: privilegeScope, attr: {title: moment(timestamp()).fromNow()}"></span>
  79. <!-- ko if: grantOption -->
  80. <i class="fa fa-unlock muted" title="${ _('With grant option') }"></i>
  81. <!-- /ko -->
  82. <span data-bind="visible: metastorePath() != '' && privilegeType() == 'db'">
  83. <a data-bind="attr: { href: metastorePath() }" class="muted" target="_blank" style="margin-left: 4px" title="${ _('Open in Metastore') }"><i class="fa fa-external-link"></i></a>
  84. </span>
  85. <br/>
  86. server=<span data-bind="text: serverName"></span>
  87. <!-- ko if: privilegeType() == 'db' -->
  88. <span data-bind="visible: dbName">
  89. <i class="fa fa-long-arrow-right"></i> db=<a class="pointer" data-bind="click: function(){ $root.linkToBrowse(dbName()) }" title="${ _('Browse db privileges') }"><span data-bind="text: dbName"></span></a>
  90. </span>
  91. <span data-bind="visible: tableName">
  92. <i class="fa fa-long-arrow-right"></i> table=<a class="pointer" data-bind="click: function(){ $root.linkToBrowse(dbName() + '.' + tableName()) }" title="${ _('Browse table privileges') }"><span data-bind="text: tableName"></span></a>
  93. </span>
  94. <span data-bind="visible: columnName">
  95. <i class="fa fa-long-arrow-right"></i> column=<a class="pointer" data-bind="click: function(){ $root.linkToBrowse(dbName() + '.' + tableName() + '.' + columnName()) }" title="${ _('Browse column privileges') }"><span data-bind="text: columnName"></span></a>
  96. </span>
  97. <!-- /ko -->
  98. <!-- ko if: privilegeType() == 'uri' -->
  99. <i class="fa fa-long-arrow-right"></i> <i class="fa fa-file-o"></i> <i class="fa fa-long-arrow-right"></i> <a data-bind="attr: { href: '/filebrowser/view=/' + URI().split('/')[3] }" target="_blank"><span data-bind="text: URI"></span></a>
  100. <!-- /ko -->
  101. <i class="fa fa-long-arrow-right"></i> action=<span data-bind="text: action"></span>
  102. <!-- /ko -->
  103. </div>
  104. </script>
  105. <div class="container-fluid">
  106. <div class="row-fluid">
  107. <div class="span2">
  108. <div class="sidebar-nav">
  109. <ul class="nav nav-list">
  110. <li class="nav-header">${ _('Privileges') }</li>
  111. <li class="active"><a href="javascript:void(0)" data-toggleSection="edit"><i class="fa fa-sitemap fa-rotate-270"></i> ${ _('Browse') }</a></li>
  112. <li><a href="javascript:void(0)" data-toggleSection="roles"><i class="fa fa-cubes"></i> ${ _('Roles') }</a></li>
  113. <li class="nav-header"><i class="fa fa-group"></i> ${ _('Groups') }
  114. <div>
  115. <br/>
  116. <select id="selectedGroup" data-bind="options: $root.selectableHadoopGroups, select2: { dropdownAutoWidth: true, update: $data.action, type: 'action', allowClear: true }" style="width: 100%"></select>
  117. </div>
  118. </li>
  119. </ul>
  120. </div>
  121. </div>
  122. <div class="span10">
  123. <div id="edit" class="mainSection card card-small">
  124. <h1 class="card-heading simple">
  125. ${ _('Database and Table privileges') }
  126. <div id="help-content" class="hide">
  127. ${ _('Check the') } <a href="http://gethue.com/apache-sentry-made-easy-with-the-new-hue-security-app/#howto" target="_blank">${ _('documentation!') }</a>
  128. </div>
  129. <div data-bind="visible: ! $root.is_sentry_admin" class="pull-right" rel="tooltip" data-original-title="${ _('Click to see some Help') }" data-placement="top">
  130. <i class="fa fa-question-circle help" style="cursor: pointer"></i>
  131. </div>
  132. </h1>
  133. <div class="card-body">
  134. <div class="row-fluid" data-bind="visible: $root.doAs() != '${ user.username }' && ! $root.assist.isDiffMode()">
  135. <div class="span12">
  136. <div class="alert"><i class="fa fa-warning"></i> ${ _('You are currently impersonating the user') } <strong data-bind="text: $root.doAs"></strong></div>
  137. </div>
  138. </div>
  139. <div class="row-fluid">
  140. <div class="span6">
  141. <div class="path-container">
  142. <div class="input-append span12">
  143. <input id="path" class="path" type="text" autocomplete="off" />
  144. <a data-bind="attr: { href: $root.assist.metastorePath() }" target="_blank" title="${ _('Open in Metastore Browser') }" class="btn btn-inverse">
  145. <i class="fa fa-external-link"></i>
  146. </a>
  147. </div>
  148. <div class="clearfix"></div>
  149. <div class="tree-toolbar">
  150. <div class="pull-right">
  151. % if has_impersonation_perm:
  152. <div class="dropdown inline-block" style="margin-right: 6px">
  153. <a class="dropdown-toggle" data-toggle="dropdown" href="#">
  154. <i class="fa fa-eye-slash" data-bind="visible: $root.assist.isDiffMode"></i>
  155. <i class="fa fa-eye" data-bind="visible: ! $root.assist.isDiffMode()"></i>
  156. <span data-bind="visible: $root.assist.isDiffMode">${ _('Show non accessible paths for') }</span>
  157. <span data-bind="visible: ! $root.assist.isDiffMode()">${ _('Impersonate the user') }</span>
  158. </a>
  159. <ul class="dropdown-menu">
  160. <li data-bind="visible: ! $root.assist.isDiffMode(), click: function() { $root.assist.isDiffMode(true); }">
  161. <a tabindex="-1" href="#">${ _('Show non accessible paths for') }</a>
  162. </li>
  163. <li data-bind="visible: $root.assist.isDiffMode(), click: function() { $root.assist.isDiffMode(false); }">
  164. <a tabindex="-1" href="#">${ _('Impersonate the user') }</a>
  165. </li>
  166. </ul>
  167. </div>
  168. <select class="user-list" data-bind="options: $root.selectableHadoopUsers, select2: { placeholder: '${ _ko("Select a user") }', update: $root.doAs, type: 'user'}" style="width: 120px"></select>
  169. % endif
  170. </div>
  171. <div>
  172. <a class="pointer" data-bind="click: $root.assist.collapseOthers" rel="tooltip" data-placement="right" title="${_('Close other nodes')}">
  173. <i class="fa fa-compress"></i>
  174. </a>
  175. &nbsp;
  176. <a class="pointer" data-bind="click: $root.assist.refreshTree" rel="tooltip" data-placement="right" title="${_('Refresh the tree')}">
  177. <i class="fa fa-refresh"></i>
  178. </a>
  179. &nbsp;
  180. <a class="pointer" data-bind="visible: $root.assist.checkedItems().length > 0, click: function(){ $root.isApplyingBulk(true); $('#bulkActionsModal').modal('show'); }" rel="tooltip" data-placement="right" title="${ _('Add, replace or remove ACLs for the checked paths') }">
  181. <i class="fa fa-copy"></i>
  182. </a>
  183. &nbsp;
  184. <i class="fa fa-spinner fa-spin" data-bind="visible: $root.assist.isLoadingTree()"></i>
  185. </div>
  186. </div>
  187. </div>
  188. ${ tree.render(id='expandableTree', data='$root.assist.treeData', afterRender='$root.assist.afterRender') }
  189. </div>
  190. <div class="span6 acl-panel">
  191. <div class="acl-panel-content">
  192. <div class="pull-right">
  193. <input class="input-medium no-margin" type="text" placeholder="${ _('Search privileges...') }" data-bind="value: privilegeFilter, valueUpdate: 'afterkeydown', visible: $root.assist.privileges().length > 1"> &nbsp;
  194. <a data-bind="visible: $root.assist.privileges().length > 0 && $root.is_sentry_admin, click: function(){ $root.showCreateRole(true); $('#createRoleModal').modal('show'); }" class="btn pointer">
  195. <i class="fa fa-plus-circle"></i> ${ _('Add role') }
  196. </a>
  197. </div>
  198. <div data-bind="visible: $root.assist.privileges().length == 0 && $root.isLoadingPrivileges()"><i class="fa fa-spinner fa-spin" data-bind="visible: $root.isLoadingPrivileges()"></i> <em class="muted">${ _('Loading privileges...')}</em></div>
  199. <h4 style="margin-top: 4px" data-bind="visible: $root.assist.privileges().length > 0 && ! $root.isLoadingPrivileges()">${ _('Privileges') } &nbsp;</h4>
  200. <div data-bind="visible: $root.assist.privileges().length == 0 && ! $root.isLoadingPrivileges()">
  201. <div class="span10 offset1 center" style="cursor: pointer" data-bind="click: function(){ if ($root.is_sentry_admin) { $root.showCreateRole(true); $('#createRoleModal').modal('show'); } }">
  202. <i data-bind="visible: $root.is_sentry_admin" class="fa fa-plus-circle waiting"></i>
  203. <h1 class="emptyMessage">
  204. ${ _('No privileges found for the selected item') }<br/>
  205. <a class="pointer" data-bind="visible: $root.is_sentry_admin">${ _('Click here to add some') }</a>
  206. </h1>
  207. </div>
  208. </div>
  209. <div data-bind="template: { name: 'role', foreach: $root.assist.roles }"></div>
  210. </div>
  211. </div>
  212. </div>
  213. </div>
  214. </div>
  215. <div id="roles" class="mainSection hide card card-small">
  216. <h1 class="card-heading simple">
  217. ${ _('Roles') }
  218. <div data-bind="visible: ! $root.is_sentry_admin" class="pull-right" rel="tooltip" data-original-title="${ _('Click to see some Help') }" data-placement="top">
  219. <i class="fa fa-question-circle help" style="cursor: pointer"></i>
  220. </div>
  221. </h1>
  222. <div class="card-body">
  223. <h1 class="muted" data-bind="visible: $root.isLoadingRoles()"><i class="fa fa-spinner fa-spin"></i></h1>
  224. <div class="span10 offset1 center" style="cursor: pointer" data-bind="visible: $root.roles().length == 0 && ! $root.isLoadingRoles(), click: function(){ if ($root.is_sentry_admin) { $root.showCreateRole(true); $('#createRoleModal').modal('show'); } }">
  225. <i data-bind="visible: $root.is_sentry_admin" class="fa fa-plus-circle waiting"></i>
  226. <h1 class="emptyMessage">
  227. ${ _('There are currently no roles defined') }<br/>
  228. <a class="pointer" data-bind="visible: $root.is_sentry_admin">${ _('Click here to add one') }</a>
  229. <br/>
  230. </h1>
  231. </div>
  232. <div class="clearfix" data-bind="visible: $root.roles().length == 0 && ! $root.isLoadingRoles()"></div>
  233. <div data-bind="visible: $root.roles().length > 0 && ! $root.isLoadingRoles()">
  234. <%actionbar:render>
  235. <%def name="search()">
  236. <input id="filterInput" type="text" class="input-xlarge search-query" placeholder="${_('Search roles by name, groups, etc...')}" data-bind="value: $root.roleFilter, valueUpdate: 'afterkeydown'">
  237. </%def>
  238. <%def name="actions()">
  239. <button class="btn toolbarBtn" data-bind="click: $root.expandSelectedRoles, enable: $root.selectedRoles().length > 0"><i class="fa fa-expand"></i> ${ _('Expand') }</button>
  240. <button class="btn toolbarBtn" data-bind="visible: $root.is_sentry_admin, click: function(){ $('#deleteRoleModal').modal('show'); }, enable: $root.selectedRoles().length > 0">
  241. <i class="fa fa-times"></i> ${ _('Delete') }
  242. </button>
  243. </%def>
  244. <%def name="creation()">
  245. <a data-bind="visible: $root.is_sentry_admin, click: function(){ $root.showCreateRole(true); $('#createRoleModal').modal('show'); }" class="btn pointer">
  246. <i class="fa fa-plus-circle"></i> ${ _('Add') }
  247. </a>
  248. </%def>
  249. </%actionbar:render>
  250. </div>
  251. <table class="card-marginbottom" data-bind="visible: $root.roles().length > 0 && ! $root.isLoadingRoles()">
  252. <thead>
  253. <th width="1%"><div data-bind="click: $root.selectAllRoles, css: { hueCheckbox: true, 'fa': true, 'fa-check': allRolesSelected }"></div></th>
  254. <th width="2%"></th>
  255. <th width="20%" style="text-align:left">${ _('Name') }</th>
  256. <th width="74%" style="text-align:left">${ _('Groups') }</th>
  257. <th width="3%"></th>
  258. </thead>
  259. <tbody data-bind="foreach: $root.filteredRoles">
  260. <tr>
  261. <td class="center" data-bind="click: handleSelect" style="cursor: default">
  262. <div data-bind="css: { hueCheckbox: true, 'fa': true, 'fa-check': selected }"></div>
  263. </td>
  264. <td class="center">
  265. <a href="javascript:void(0);" title="${ _('Show privileges') }">
  266. <i class="fa fa-2x fa-caret" data-bind="click: function() { if (showPrivileges()) { showPrivileges(false); } else { $root.list_sentry_privileges_by_role($data);} }, css: {'fa-caret-right' : ! showPrivileges(), 'fa-caret-down': showPrivileges() }"></i>
  267. </a>
  268. </td>
  269. <td data-bind="click: function() { if (showPrivileges()) { showPrivileges(false); } else { $root.list_sentry_privileges_by_role($data);} }" class="pointer">
  270. <a data-bind="attr: {'href': name}"></a>
  271. <i class="fa fa-cube muted"></i>
  272. <span data-bind="text: name"/>
  273. </td>
  274. <td>
  275. <!-- ko if: $root.is_sentry_admin -->
  276. <a class="pointer" data-bind="click: function() { if ($root.is_sentry_admin) { showEditGroups(true); } }">
  277. <span data-bind="foreach: groups, visible: ! showEditGroups() && ! groupsChanged()">
  278. <span data-bind="text: $data"></span>
  279. </span>
  280. <span data-bind="visible: ! showEditGroups() && ! groupsChanged() && groups().length == 0">
  281. <i class="fa fa-plus"></i> ${ _('Add a group') }
  282. </span>
  283. </a>
  284. <div data-bind="visible: showEditGroups() || (groupsChanged() && ! $root.isLoadingRoles())">
  285. <select data-bind="options: $root.selectableHadoopGroups, selectedOptions: groups, select2: { update: groups, type: 'group', onBlur: function(){ showEditGroups(false); } }" size="5" multiple="true" style="width: 400px"></select>
  286. &nbsp;
  287. <a class="pointer" data-bind="visible: groupsChanged() && !$root.isLoadingRoles(), click: resetGroups">
  288. <i class="fa fa-undo"></i>
  289. </a>
  290. <a class="pointer" data-bind="visible: groupsChanged() && !$root.isLoadingRoles(), click: saveGroups">
  291. <i class="fa fa-save"></i>
  292. </a>
  293. </div>
  294. <!-- /ko -->
  295. <!-- ko ifnot: $root.is_sentry_admin -->
  296. <span data-bind="foreach: groups">
  297. <span data-bind="text: $data"></span>
  298. </span>
  299. <!-- /ko -->
  300. </td>
  301. <td>
  302. </td>
  303. </tr>
  304. <tr>
  305. <td colspan="2"></td>
  306. <td colspan="4">
  307. <div data-bind="template: { name: 'privilege', foreach: $data.privileges }, visible: $data.showPrivileges">
  308. </div>
  309. </td>
  310. </tr>
  311. <tr data-bind="visible: $data.showPrivileges">
  312. <td colspan="2"></td>
  313. <td colspan="4">
  314. <div class="acl-block acl-actions" data-bind="click: privilegesChanged().length == 0 ? addPrivilege : void(0), visible: $root.is_sentry_admin">
  315. <span class="pointer" data-bind="click: addPrivilege, visible: $data.showPrivileges" title="${ _('Add privilege') }"><i class="fa fa-plus"></i></span>
  316. <span class="pointer" data-bind="click: $root.list_sentry_privileges_by_role, visible: privilegesChanged().length > 0" title="${ _('Undo') }"> &nbsp; <i class="fa fa-undo"></i></span>
  317. <span class="pointer" data-bind="click: function() { deletePrivilegeModal($data) }, visible: privilegesChanged().length > 0 && isValid()" title="${ _('Save') }"> &nbsp; <i class="fa fa-save"></i></span>
  318. </div>
  319. </td>
  320. </tr>
  321. </tbody>
  322. </table>
  323. </div>
  324. </div>
  325. </div> <!-- /span10 -->
  326. </div>
  327. <div id="createRoleModal" class="modal hide fade in" role="dialog">
  328. <div class="modal-header">
  329. <button type="button" class="close" data-dismiss="modal" aria-hidden="true">&times;</button>
  330. <h3 data-bind="visible: ! $root.role().isEditing()">${ _('Add or select a role') }</h3>
  331. <h3 data-bind="visible: $root.role().isEditing()">${ _('Edit role') }</h3>
  332. </div>
  333. <div class="modal-body" data-bind="with: $root.role, visible: showCreateRole">
  334. <div class="row-fluid">
  335. <div class="span6">
  336. <h4>${ _('Name') }</h4>
  337. <input id="createRoleName" type="text" class="input-xlarge" data-bind="value: $data.name, visible: ! $data.isEditing()" placeholder="${ _('New or existing role name') }" style="width: 360px" />
  338. <strong data-bind="text: $data.name, visible: $data.isEditing()"></strong>
  339. </div>
  340. <div class="span6">
  341. <h4>${ _('Groups') }</h4>
  342. <select data-bind="options: $root.selectableHadoopGroups, selectedOptions: groups, select2: { update: groups, type: 'group', placeholder: '${ _ko("Optional") }' }" size="5" multiple="true" style="width: 360px"></select>
  343. </div>
  344. </div>
  345. <h4>${ _('Privileges') }</h4>
  346. <div data-bind="template: { name: 'privilege', foreach: privileges }"></div>
  347. <div class="acl-block acl-actions pointer" data-bind="click: addPrivilege">
  348. <span class="pointer" title="${ _('Add privilege') }"><i class="fa fa-plus"></i></span>
  349. </div>
  350. </div>
  351. <div class="modal-footer">
  352. <button class="btn" data-dismiss="modal" aria-hidden="true">${ _('Cancel') }</button>
  353. <button class="btn btn-primary disable-enter disable-feedback" data-bind="click: $root.role().create, visible: ! $root.role().isEditing(), css: {'disabled': $root.role().isLoading() || !$root.role().isValid()}">${ _('Save') }</button>
  354. <button class="btn btn-primary disable-enter disable-feedback" data-bind="click: $root.role().update, visible: $root.role().isEditing(), css: {'disabled': $root.role().isLoading() || !$root.role().isValid()}"">${ _('Update') }</button>
  355. </div>
  356. </div>
  357. <div id="grantPrivilegeModal" class="modal hide fade in" role="dialog">
  358. <div class="modal-header">
  359. <button type="button" class="close" data-dismiss="modal" aria-hidden="true">&times;</button>
  360. <h3>${ _('Grant privilege') }</h3>
  361. </div>
  362. <div class="modal-body">
  363. <!-- ko if: $root.grantToPrivilege() -->
  364. <div data-bind="template: { name: 'privilege', data: $root.grantToPrivilege() }"></div>
  365. <!-- /ko -->
  366. <br/>
  367. <span>${ _('To role') }&nbsp;&nbsp;</span>
  368. <select data-bind="options: $root.selectableRoles(), value: $root.grantToPrivilegeRole, select2: { update: $root.grantToPrivilegeRole, placeholder: '${ _ko("Select a role") }', type: 'role' }" style="width: 360px"></select>
  369. <br/>
  370. </div>
  371. <div class="modal-footer">
  372. <button class="btn" data-dismiss="modal" aria-hidden="true">${ _('Cancel') }</button>
  373. <button data-loading-text="${ _('Saving...') }" class="btn btn-primary disable-enter" data-bind="click: $root.grant_privilege">${ _('Grant') }</button>
  374. </div>
  375. </div>
  376. <div id="deleteRoleModal" class="modal hide fade in" role="dialog">
  377. <div class="modal-header">
  378. <a href="#" class="close" data-dismiss="modal">&times;</a>
  379. <h3>${ _('Do you really want to delete the selected role(s)?') }</h3>
  380. </div>
  381. <div class="modal-footer">
  382. <button class="btn" data-dismiss="modal" aria-hidden="true">${ _('Cancel') }</button>
  383. <button data-loading-text="${ _('Deleting...') }" class="btn btn-danger" data-bind="click: $root.deleteSelectedRoles">${ _('Yes') }</button>
  384. </div>
  385. </div>
  386. <div id="deletePrivilegeModal" class="modal hide fade in" role="dialog">
  387. <div class="modal-header">
  388. <a href="#" class="close" data-dismiss="modal">&times;</a>
  389. <h3>${ _('Confirm the deletion?') }</h3>
  390. </div>
  391. <div class="modal-body">
  392. ${ _('Sentry will recursively delete the SERVER or DATABASE privileges you marked for deletion.') }
  393. </div>
  394. <div class="modal-footer">
  395. <button class="btn" data-dismiss="modal" aria-hidden="true">${ _('Cancel') }</button>
  396. <button data-loading-text="${ _('Deleting...') }" class="btn btn-danger" data-bind="click: function() { $root.role().savePrivileges($root.roleToUpdate()); }">${ _('Yes, delete') }</button>
  397. </div>
  398. </div>
  399. <div id="bulkActionsModal" class="modal hide fade in" role="dialog">
  400. <div class="modal-header">
  401. <a href="#" class="close" data-dismiss="modal">&times;</a>
  402. <h3>${ _('Select one operation') }</h3>
  403. </div>
  404. <div class="modal-body" style="overflow-x: hidden">
  405. <div class="row-fluid">
  406. <div class="span8">
  407. <div class="row-fluid">
  408. <div class="span4 center">
  409. <div class="big-btn" data-bind="css: {'selected': $root.bulkAction() == 'add'}, click: function(){$root.bulkAction('add')}">
  410. <i class="fa fa-plus"></i><br/><br/>
  411. <span>${ _('Add current privileges to selection') }</span>
  412. </div>
  413. </div>
  414. <div class="span4 center">
  415. <div class="big-btn" data-bind="css: {'selected': $root.bulkAction() == 'sync'}, click: function(){$root.bulkAction('sync')}">
  416. <i class="fa fa-random"></i><br/><br/>
  417. <span>${ _('Replace selection with current privileges') }</span>
  418. </div>
  419. </div>
  420. <div class="span4 center">
  421. <div class="big-btn" data-bind="css: {'selected': $root.bulkAction() == 'delete'}, click: function(){$root.bulkAction('delete')}">
  422. <i class="fa fa-eraser"></i><br/><br/>
  423. <span>${ _('Delete all privileges of selection') }</span>
  424. </div>
  425. </div>
  426. </div>
  427. </div>
  428. <div class="span4">
  429. <h4>${ _('to apply to the selection') }</h4>
  430. <ul class="unstyled modal-panel" data-bind="foreach: $root.assist.checkedItems">
  431. <li data-bind="visible: path.indexOf('.') > -1" class="force-word-break">
  432. <i class="fa fa-database muted"></i>
  433. <span data-bind="text: path.split('.')[0]"></span>
  434. <i class="fa fa-long-arrow-right muted"></i>
  435. <i class="fa fa-table muted"></i>
  436. <span data-bind="text: path.split('.')[1]"></span>
  437. <span data-bind="visible: path.split('.')[2]">
  438. <i class="fa fa-long-arrow-right muted"></i>
  439. <i class="fa fa-columns muted"></i>
  440. <span data-bind="text: path.split('.')[2]"></span>
  441. </span>
  442. </li>
  443. <li data-bind="visible: path.indexOf('.') == -1" class="force-word-break">
  444. <i class="fa fa-database muted"></i> <span data-bind="text: path.split('.')[0]"></span>
  445. </li>
  446. </ul>
  447. </div>
  448. </div>
  449. <br/>
  450. <div class="row-fluid" data-bind="visible: $root.bulkAction() != '' && $root.bulkAction() != 'delete'">
  451. <div class="span12">
  452. <h4>${ _('Privileges to apply') }</h4>
  453. <div data-bind="visible: $root.assist.privileges().length == 0"><em class="muted">${ _('No privileges found for the selected item.')}</em></div>
  454. <div data-bind="template: { name: 'role', foreach: $root.assist.roles }" class="modal-panel"></div>
  455. </div>
  456. </div>
  457. </div>
  458. <div class="modal-footer">
  459. <button class="btn" data-dismiss="modal" aria-hidden="true">${ _('Cancel') }</button>
  460. <button class="btn" data-bind="enable: $root.bulkAction(), css: {'btn-primary': $root.bulkAction() != 'delete', 'btn-danger': $root.bulkAction() == 'delete'}, click: $root.bulkPerfomAction">${ _('Confirm') }</button>
  461. </div>
  462. </div>
  463. <div id="chooseFile" class="modal hide fade">
  464. <div class="modal-header">
  465. <a href="#" class="close" data-dismiss="modal">&times;</a>
  466. <h3>${_('Choose a file')}</h3>
  467. </div>
  468. <div class="modal-body">
  469. <div id="filechooser">
  470. </div>
  471. </div>
  472. <div class="modal-footer">
  473. </div>
  474. </div>
  475. <%def name="treeIcons()">
  476. 'fa-hdd-o': isServer(),
  477. 'fa-database-open': isDb() && (nodes().length > 0 || isLoaded()),
  478. 'fa-database': isDb() && nodes().length == 0,
  479. 'fa-table': isTable(),
  480. 'fa-columns': isColumn()
  481. </%def>
  482. <%def name="withPrivilegesPullRight()">
  483. <div class="pull-right">
  484. <i class="fa fa-shield" data-bind="visible: withPrivileges()" style="color: #338bb8" title="${ _('Has some privileges') }"></i>&nbsp;
  485. <i class="fa fa-file-o muted" data-bind="click: $root.assist.showHdfs ,visible: isTable()"></i>
  486. </div>
  487. </%def>
  488. ${ tree.import_templates(itemClick='$root.assist.setPath', iconClick='$root.assist.togglePath', itemSelected='$root.assist.path() == path()', styleModifier='withPrivileges', iconModifier=treeIcons, anchorProperty='path', itemChecked='isChecked', styleModifierPullRight=withPrivilegesPullRight) }
  489. <script src="${ static('desktop/ext/js/knockout.min.js') }" type="text/javascript" charset="utf-8"></script>
  490. <script src="${ static('desktop/ext/js/knockout-mapping.min.js') }" type="text/javascript" charset="utf-8"></script>
  491. <script src="${ static('desktop/ext/js/routie-0.3.0.min.js') }" type="text/javascript" charset="utf-8"></script>
  492. <script src="${ static('desktop/js/ko.hue-bindings.js') }" type="text/javascript" charset="utf-8"></script>
  493. <script src="${ static('security/js/hive.ko.js') }" type="text/javascript" charset="utf-8"></script>
  494. <script src="${ static('desktop/js/jquery.hiveautocomplete.js') }" type="text/javascript" charset="utf-8"></script>
  495. <script src="${ static('desktop/js/jquery.filechooser.js') }" type="text/javascript" charset="utf-8"></script>
  496. <script type="text/javascript" charset="utf-8">
  497. ko.options.deferUpdates = true;
  498. function deletePrivilegeModal(role) {
  499. var cascadeDeletes = $.grep(role.privilegesChanged(), function(privilege) {
  500. return privilege.status() == 'deleted' && (privilege.privilegeScope() == 'SERVER' || privilege.privilegeScope() == 'DATABASE'); }
  501. );
  502. if (cascadeDeletes.length > 0 ) {
  503. viewModel.roleToUpdate(role);
  504. $('#deletePrivilegeModal').modal('show');
  505. } else {
  506. viewModel.role().savePrivileges(role);
  507. }
  508. }
  509. var viewModel = new HiveViewModel(${ initial | n,unicode });
  510. ko.applyBindings(viewModel);
  511. $(document).ready(function () {
  512. var _initialPath = viewModel.getPathHash();
  513. viewModel.init(_initialPath);
  514. $("#path").val(_initialPath);
  515. $(".help").popover({
  516. 'title': "${ _('Looking for edit permissions?') }",
  517. 'content': $("#help-content").html(),
  518. 'trigger': 'click',
  519. 'placement': 'left',
  520. 'html': true
  521. });
  522. function setPathFromAutocomplete(path){
  523. if (path.lastIndexOf(".") == path.length -1){
  524. path = path.substring(0, path.length - 1);
  525. }
  526. viewModel.assist.path(path);
  527. viewModel.assist.updatePathProperty(viewModel.assist.growingTree(), path, "isExpanded", true);
  528. viewModel.assist.fetchHivePath();
  529. }
  530. $("#path").jHueGenericAutocomplete({
  531. skipColumns: true,
  532. home: viewModel.assist.path(),
  533. onPathChange: function (path) {
  534. setPathFromAutocomplete(path);
  535. },
  536. onEnter: function (el) {
  537. setPathFromAutocomplete(el.val());
  538. },
  539. smartTooltip: "${_('Did you know? You can use the tab key or CTRL + Space to autocomplete file and folder names')}"
  540. });
  541. function resizeComponents() {
  542. $("#path").width($(".tree-toolbar").width() - 64);
  543. $("#expandableTree").height($(window).height() - 260);
  544. $(".acl-panel-content").height($(window).height() - 240);
  545. }
  546. resizeComponents();
  547. $(document).on("rendered.tree", function() {
  548. var _path = viewModel.assist.path();
  549. if (_path[_path.length-1] == "/"){
  550. _path = _path.substr(0, _path.length - 1);
  551. }
  552. if ($("a.anchor[href^='"+_path+"']").length > 0){
  553. $("#expandableTree").animate({
  554. scrollTop: ($("a.anchor[href^='"+_path+"']:first").position().top + $("#expandableTree").scrollTop() - $("#expandableTree").position().top - 4) + "px"
  555. });
  556. }
  557. });
  558. $(document).on("created.role", function(){
  559. $("#createRoleModal").modal("hide");
  560. $("#grantPrivilegeModal").modal("hide");
  561. $("#deletePrivilegeModal").modal("hide");
  562. viewModel.clearTempRoles();
  563. window.setTimeout(function(){
  564. viewModel.refreshExpandedRoles();
  565. }, 500);
  566. });
  567. $(document).on("deleted.role", function(){
  568. $("#deleteRoleModal").modal("hide");
  569. });
  570. $(document).on("changed.path", function(){
  571. if ($("#path").val() != viewModel.assist.path()){
  572. $("#path").val(viewModel.assist.path());
  573. }
  574. });
  575. function showMainSection(mainSection) {
  576. if ($("#" + mainSection).is(":hidden")) {
  577. $(".mainSection").hide();
  578. $("#" + mainSection).show();
  579. highlightMainMenu(mainSection);
  580. viewModel.updateSectionHash(mainSection);
  581. }
  582. logGA(mainSection);
  583. }
  584. function highlightMainMenu(mainSection) {
  585. $(".nav.nav-list li").removeClass("active");
  586. $("a[data-toggleSection='" + mainSection + "']").parent().addClass("active");
  587. }
  588. $("[data-toggleSection]").on("click", function(){
  589. showMainSection($(this).attr("data-toggleSection"));
  590. });
  591. showMainSection(viewModel.getSectionHash());
  592. $(document).on("show.mainSection", function(){
  593. showMainSection(viewModel.getSectionHash());
  594. });
  595. $(document).on("show.role", function(e, role) {
  596. if (typeof role != "undefined" && role.name != null){
  597. $("#bulkActionsModal").modal("hide");
  598. showMainSection("roles");
  599. $("html, body").animate({
  600. scrollTop: ($("a[href='" + role.name() + "']").position().top - 90) + "px"
  601. });
  602. }
  603. });
  604. var _resizeTimeout = -1;
  605. $(window).resize(function(){
  606. window.clearTimeout(_resizeTimeout);
  607. _resizeTimeout = window.setTimeout(resizeComponents, 100);
  608. });
  609. window.onpopstate = function() {
  610. viewModel.assist.path(viewModel.getPathHash());
  611. };
  612. $("#createRoleModal").modal({
  613. show: false
  614. });
  615. $("#grantPrivilegeModal").modal({
  616. show: false
  617. });
  618. $("#createRoleModal").on("show", function () {
  619. $(document).trigger("create.typeahead");
  620. });
  621. $("#createRoleModal").on("hide", function () {
  622. $('#jHueGenericAutocomplete').hide();
  623. viewModel.resetCreateRole();
  624. });
  625. $("#grantPrivilegeModal").on("hide", function () {
  626. viewModel.clearTempRoles();
  627. });
  628. $("#deleteRoleModal").modal({
  629. show: false
  630. });
  631. $("#selectedGroup").select2("val", "");
  632. $("#selectedGroup").change(function() {
  633. viewModel.list_sentry_privileges_by_authorizable();
  634. viewModel.list_sentry_roles_by_group();
  635. });
  636. $(document).on("added.bulk.privileges", function() {
  637. $(document).trigger("info", "${ _('The current privileges have been successfully added to the checked items.') }");
  638. $("#bulkActionsModal").modal("hide");
  639. });
  640. $(document).on("deleted.bulk.privileges", function() {
  641. $(document).trigger("info", "${ _('All the privileges have been successfully removed from the checked items.') }");
  642. $("#bulkActionsModal").modal("hide");
  643. });
  644. $(document).on("syncd.bulk.privileges", function() {
  645. $(document).trigger("info", "${ _('All the privileges for the checked items have been replaced with the current selection.') }");
  646. $("#bulkActionsModal").modal("hide");
  647. });
  648. $("#bulkActionsModal").modal({
  649. show: false
  650. });
  651. $("#bulkActionsModal").on("hidden", function(){
  652. viewModel.isApplyingBulk(false);
  653. });
  654. $(document).on("create.typeahead", function(){
  655. $("#createRoleName").typeahead({
  656. source: function (query) {
  657. var _options = [];
  658. viewModel.selectableRoles().forEach(function (item) {
  659. if (item.toLowerCase().indexOf(query.toLowerCase()) > -1) {
  660. _options.push(item);
  661. }
  662. });
  663. return _options;
  664. },
  665. minLength: 0,
  666. 'updater': function (item) {
  667. return item;
  668. }
  669. });
  670. });
  671. $(document).on('focus', '#createRoleName', function () {
  672. if ($("#createRoleName").data('typeahead')){
  673. $("#createRoleName").data('typeahead').lookup();
  674. }
  675. });
  676. $(document).on("destroy.typeahead", function(){
  677. $('.typeahead').unbind();
  678. $("ul.typeahead").hide();
  679. });
  680. $(document).trigger("create.typeahead");
  681. $("#deletePrivilegeModal").modal({
  682. show: false
  683. });
  684. });
  685. </script>
  686. ${ commonfooter(request, messages) | n,unicode }