You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@beam.apache.org by "aaltay (via GitHub)" <gi...@apache.org> on 2026/04/20 14:20:13 UTC

[I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

aaltay opened a new issue, #30911:
URL: https://github.com/apache/beam/issues/30911

   ### What would you like to happen?
   
   Explain a few concepts like:
   - Beam allows users to run arbitrary code. And Beam does not have different code privilege levels. (Because of that some code execution vulnerabilities will be normal within Beam's model.)
   - Beam work with different runners. Runners security models will apply in the execution environment (e.g. cluster models might allow resource access across running jobs.) (Because of that runner related security issues will be best addressed with the specific runners.)
   - ...
   
   ### Issue Priority
   
   Priority: 3 (nice-to-have improvement)
   
   ### Issue Components
   
   - [ ] Component: Python SDK
   - [ ] Component: Java SDK
   - [ ] Component: Go SDK
   - [ ] Component: Typescript SDK
   - [ ] Component: IO connector
   - [ ] Component: Beam YAML
   - [ ] Component: Beam examples
   - [ ] Component: Beam playground
   - [ ] Component: Beam katas
   - [X] Component: Website
   - [ ] Component: Spark Runner
   - [ ] Component: Flink Runner
   - [ ] Component: Samza Runner
   - [ ] Component: Twister2 Runner
   - [ ] Component: Hazelcast Jet Runner
   - [ ] Component: Google Cloud Dataflow Runner


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "Abacn (via GitHub)" <gi...@apache.org>.
Abacn closed issue #30911: [Feature Request]: Add a basic doc explaining Beam's security model
URL: https://github.com/apache/beam/issues/30911


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "Abacn (via GitHub)" <gi...@apache.org>.
Abacn commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-6270967410

   Fixed by #40421


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "aaltay (via GitHub)" <gi...@apache.org>.
aaltay commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-2852808386

   It was a discussion on the Beam's private list (among the PMC) as a follow up to security report.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #30911: [Feature Request]: Add a basic doc explaining Beam's security model
URL: https://github.com/apache/beam/issues/30911


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-3927080434

   This issue has been closed due to lack of activity. If you think that is incorrect, you can reopen the issue at any time.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "rakeshcusat (via GitHub)" <gi...@apache.org>.
rakeshcusat commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-2853370428

   @aaltay Was there any consensus where this note will exist? I am assuming that keeping in our beam website, and individual SDK documentation would make more sense. What do you think?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "aaltay (via GitHub)" <gi...@apache.org>.
aaltay commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-2855970022

   No, there were no details or consensus on the solution. IMO, keeping this in the beam website (somewhere under https://beam.apache.org/documentation/) would make sense.
   
   If you are interested, please take a first stab. We will appreciate it very much. And it does not need to be perfect, something simple would be a great improvement.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "aaltay (via GitHub)" <gi...@apache.org>.
aaltay commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-2046201043

   /cc @damccorm @tvalentyn - FYI as this relates to an email discussion.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-5741948211

   This issue has been marked as stale due to 150 days of inactivity. It will be closed in 30 days if no further activity occurs. If you think that’s incorrect or this issue still needs to be addressed, please simply write any comment. If closed, you can reopen the issue at any time. Thank you for your contributions.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-6267633540

   This issue has been closed due to lack of activity. If you think that is incorrect, you can reopen the issue at any time.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "rakeshcusat (via GitHub)" <gi...@apache.org>.
rakeshcusat commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-2834183174

   @aaltay can you point me to the email discussion?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "rakeshcusat (via GitHub)" <gi...@apache.org>.
rakeshcusat commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-2861893805

   @aaltay I can take a look, feel free to share other relevant information. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] closed issue #30911: [Feature Request]: Add a basic doc explaining Beam's security model
URL: https://github.com/apache/beam/issues/30911


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] [Feature Request]: Add a basic doc explaining Beam's security model [beam]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #30911:
URL: https://github.com/apache/beam/issues/30911#issuecomment-3772725860

   This issue has been marked as stale due to 150 days of inactivity. It will be closed in 30 days if no further activity occurs. If you think that’s incorrect or this issue still needs to be addressed, please simply write any comment. If closed, you can reopen the issue at any time. Thank you for your contributions.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@beam.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org