[jira] [Updated] (MESOS-3903) Add authorization for '/create-volume' and '/destroy-volume' HTTP endpoints

["Greg Mann (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/MESOS-3903?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Greg Mann updated MESOS-3903:
-----------------------------
    Summary: Add authorization for '/create-volume' and '/destroy-volume' HTTP endpoints  (was: Add authorization for 'create' and 'destroy' HTTP endpoints)

> Add authorization for '/create-volume' and '/destroy-volume' HTTP endpoints
> ---------------------------------------------------------------------------
>
>                 Key: MESOS-3903
>                 URL: https://issues.apache.org/jira/browse/MESOS-3903
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Greg Mann
>            Assignee: Greg Mann
>              Labels: mesosphere, persistent-volumes
>
> We need to add ACL authorization for the 'create' and 'destroy' HTTP endpoints. In other complementary work, authorization for frameworks performing {{CREATE}} and {{DESTROY}} operations is being added by MESOS-3065.
> This will consist of adding authorization calls into the HTTP endpoint code in {{src/master/http.cpp}}, as well as tests for both failed & successful calls to '/create' and '/destroy' with authorization.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)