[jira] [Updated] (TS-3358) add access checking to the management API

["James Peach (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/TS-3358?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

James Peach updated TS-3358:
----------------------------
    Fix Version/s: 5.3.0
         Assignee: James Peach

> add access checking to the management API
> -----------------------------------------
>
>                 Key: TS-3358
>                 URL: https://issues.apache.org/jira/browse/TS-3358
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: Configuration, Management API
>            Reporter: James Peach
>            Assignee: James Peach
>             Fix For: 5.3.0
>
>
> Many of the most common uses of the management API are checking metrics and configuration values. For these read-only cases, running {{traffic_line}} as root is overkill. Add unix domain socket credential checking so that we can allow read-only operations to be performed by unprivileged processes. This change also adds a configuration option to retain the current behaviour (retained by default).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)