[fb] Give S3 access to default group when IDBroker enabled.
@@ -61,6 +61,7 @@ import django.utils.timezone as dtz
from desktop import appmanager
from desktop.lib.exceptions_renderable import PopupException
+from desktop.lib.idbroker.conf import is_idbroker_enabled
from hadoop import cluster
import useradmin.conf
@@ -279,7 +280,7 @@ def update_app_permissions(**kwargs):
not (new_dp.app == 'metastore' and new_dp.action == 'write') and \
not (new_dp.app == 'hbase' and new_dp.action == 'write') and \
not (new_dp.app == 'security' and new_dp.action == 'impersonate') and \
- not (new_dp.app == 'filebrowser' and new_dp.action == 's3_access') and \
+ not (new_dp.app == 'filebrowser' and new_dp.action == 's3_access' and not is_idbroker_enabled('s3a')) and \
not (new_dp.app == 'filebrowser' and new_dp.action == 'adls_access') and \
not (new_dp.app == 'filebrowser' and new_dp.action == 'abfs_access') and \
not (new_dp.app == 'oozie' and new_dp.action == 'disable_editor_access'):
