You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "Nihal Jain (Jira)" <ji...@apache.org> on 2023/04/13 10:37:00 UTC

[jira] [Created] (HBASE-27792) Guard Master/RS Dump Servlet behind admin walls

Nihal Jain created HBASE-27792:
----------------------------------

             Summary: Guard Master/RS Dump Servlet behind admin walls
                 Key: HBASE-27792
                 URL: https://issues.apache.org/jira/browse/HBASE-27792
             Project: HBase
          Issue Type: Improvement
          Components: security, UI
            Reporter: Nihal Jain
            Assignee: Nihal Jain


Currently RSDumpServlet and MasterDumpServlet do not require any check for whether the user has privileges to access to instrumentation servlets.

This is unlike other servlets like ProfileServlet, ConfServlet, JMXJsonServlet etc. which are guarded by admin checks.

Goal of this JIRA is to add similar check for RS and Master Dump Servlet.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)