Github user ijokarumawak commented on the issue:
https://github.com/apache/nifi/pull/2990
@mcgilman Rebased with the latest master and incorporated the feedback.
About the concern:
> The issue that we're hitting now is that a user with permissions outlined
above with Service Only will be able to Enable this service but will be unable
to subsequently disable it.
I added another commit to address this, but I'm going to remove that
commit. Because...
I confirmed that even before this PR, NiFi UI works like this if the user
has READ/WRITE permissions for a CS, but only has READ to its referencing
components. Such user can enable the CS if 'Service Only', but can not disable
the CS because the referencing component can not be written.
---
