You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Alexander Rojas (JIRA)" <ji...@apache.org> on 2017/04/24 08:51:04 UTC

[jira] [Created] (MESOS-7414) Enable authorization for master's logging API calls: GET_LOGGING_LEVEL and SET_LOGGING_LEVEL

Alexander Rojas created MESOS-7414:
--------------------------------------

             Summary: Enable authorization for master's logging API calls: GET_LOGGING_LEVEL  and SET_LOGGING_LEVEL
                 Key: MESOS-7414
                 URL: https://issues.apache.org/jira/browse/MESOS-7414
             Project: Mesos
          Issue Type: Task
          Components: HTTP API, master
            Reporter: Alexander Rojas


The Operator API calls {{GET_LOGGING_LEVEL}}  and {{SET_LOGGING_LEVEL}}, as well as the v0 endpoint {{/logging/toggle}} lack authorization so any recognized user will be able to change the logging level of a given master.

Note that there are already actions defined for authorization of these actions as they were already implemented in the agent.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)