You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@mesos.apache.org by "Alexander Rojas (JIRA)" <ji...@apache.org> on 2017/04/24 08:51:04 UTC
[jira] [Created] (MESOS-7414) Enable authorization for master's
logging API calls: GET_LOGGING_LEVEL and SET_LOGGING_LEVEL
Alexander Rojas created MESOS-7414:
--------------------------------------
Summary: Enable authorization for master's logging API calls: GET_LOGGING_LEVEL and SET_LOGGING_LEVEL
Key: MESOS-7414
URL: https://issues.apache.org/jira/browse/MESOS-7414
Project: Mesos
Issue Type: Task
Components: HTTP API, master
Reporter: Alexander Rojas
The Operator API calls {{GET_LOGGING_LEVEL}} and {{SET_LOGGING_LEVEL}}, as well as the v0 endpoint {{/logging/toggle}} lack authorization so any recognized user will be able to change the logging level of a given master.
Note that there are already actions defined for authorization of these actions as they were already implemented in the agent.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)