You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Greg Mann (JIRA)" <ji...@apache.org> on 2017/08/30 20:23:00 UTC

[jira] [Commented] (MESOS-7785) Pass Operator API subscription events through authorizer

    [ https://issues.apache.org/jira/browse/MESOS-7785?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16147985#comment-16147985 ] 

Greg Mann commented on MESOS-7785:
----------------------------------

{code}
commit e4d56bcb65f7bf9805eff18e6a9249eb7512f745
Author: Quinn Leng <qu...@gmail.com>
Date:   Tue Aug 29 13:13:19 2017 -0700

    Added authorization for V1 events.

    Added authorization filtering for the master V1 operator event
    stream. Subscribers will only receive events that their
    principal is authorized to see. The new test
    'MasterAPITest.EventAuthorizationFiltering' verifies this
    behavior.

    Review: https://reviews.apache.org/r/61189/
{code}

> Pass Operator API subscription events through authorizer 
> ---------------------------------------------------------
>
>                 Key: MESOS-7785
>                 URL: https://issues.apache.org/jira/browse/MESOS-7785
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Mathew Appelman
>            Assignee: Quinn
>             Fix For: 1.5.0
>
>
> In order to consume the subscription endpoint from the Operator API in the DC/OS UI, we must ensure a user can only receive events they are authorized to consume.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)