You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@mesos.apache.org by al...@apache.org on 2016/06/30 18:18:02 UTC

[1/2] mesos git commit: Regenerated endpoint documention.

Repository: mesos
Updated Branches:
  refs/heads/master f23ef4c15 -> d2106c8fc


Regenerated endpoint documention.

Note that regenerating the endpoint documentation
also picked up a stale change in slave/api/vi.md.

Review: https://reviews.apache.org/r/49250/


Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/d2106c8f
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/d2106c8f
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/d2106c8f

Branch: refs/heads/master
Commit: d2106c8fccb6dd1118c70e7998fc331e5c80f671
Parents: eda3a2d
Author: Joerg Schad <jo...@mesosphere.io>
Authored: Thu Jun 30 15:40:27 2016 +0200
Committer: Alexander Rukletsov <al...@apache.org>
Committed: Thu Jun 30 20:17:27 2016 +0200

----------------------------------------------------------------------
 docs/endpoints/master/create-volumes.md  |  8 +++++++-
 docs/endpoints/master/destroy-volumes.md |  8 +++++++-
 docs/endpoints/master/flags.md           |  7 +------
 docs/endpoints/master/frameworks.md      |  6 +++++-
 docs/endpoints/master/reserve.md         |  8 +++++++-
 docs/endpoints/master/state-summary.md   | 10 +++++++++-
 docs/endpoints/master/state.json.md      | 10 +++++++++-
 docs/endpoints/master/state.md           | 10 +++++++++-
 docs/endpoints/master/tasks.json.md      | 10 +++++++++-
 docs/endpoints/master/tasks.md           | 10 +++++++++-
 docs/endpoints/master/teardown.md        |  8 +++++++-
 docs/endpoints/master/unreserve.md       |  8 +++++++-
 docs/endpoints/slave/api/v1.md           |  3 ++-
 docs/endpoints/slave/flags.md            |  6 +-----
 docs/endpoints/slave/state.json.md       | 10 +++++++++-
 docs/endpoints/slave/state.md            | 10 +++++++++-
 16 files changed, 107 insertions(+), 25 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/create-volumes.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/create-volumes.md b/docs/endpoints/master/create-volumes.md
index f6ec938..83f85ac 100644
--- a/docs/endpoints/master/create-volumes.md
+++ b/docs/endpoints/master/create-volumes.md
@@ -29,4 +29,10 @@ the volumes to be created.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to create persistent volumes requires that
+the current principal is authorized to create volumes for the
+specific role.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/destroy-volumes.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/destroy-volumes.md b/docs/endpoints/master/destroy-volumes.md
index 054e816..778f797 100644
--- a/docs/endpoints/master/destroy-volumes.md
+++ b/docs/endpoints/master/destroy-volumes.md
@@ -29,4 +29,10 @@ the volumes to be destroyed.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to destroy persistent volumes requires that
+the current principal is authorized to destroy volumes created
+by the principal who created the volume.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/flags.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/flags.md b/docs/endpoints/master/flags.md
index 850b6f8..acb542e 100644
--- a/docs/endpoints/master/flags.md
+++ b/docs/endpoints/master/flags.md
@@ -13,9 +13,4 @@ Exposes the master's flag configuration.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
-
-### AUTHORIZATION ###
-Querying this endpoint requires that the current principal
-is authorized to query the path.
-See the authorization documentation for details.
\ No newline at end of file
+enabled.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/frameworks.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/frameworks.md b/docs/endpoints/master/frameworks.md
index 1aed723..afb583e 100644
--- a/docs/endpoints/master/frameworks.md
+++ b/docs/endpoints/master/frameworks.md
@@ -21,4 +21,8 @@ found.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/reserve.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/reserve.md b/docs/endpoints/master/reserve.md
index 9bb04ed..71cc1a9 100644
--- a/docs/endpoints/master/reserve.md
+++ b/docs/endpoints/master/reserve.md
@@ -29,4 +29,10 @@ the resources to be reserved.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to reserve resources requires that the
+current principal is authorized to reserve resources for the
+specific role.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/state-summary.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/state-summary.md b/docs/endpoints/master/state-summary.md
index 4eb517e..2986d05 100644
--- a/docs/endpoints/master/state-summary.md
+++ b/docs/endpoints/master/state-summary.md
@@ -20,8 +20,16 @@ Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
 found.
 This endpoint gives a summary of the state of all tasks and
 registered frameworks in the cluster as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks
+they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/state.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/state.json.md b/docs/endpoints/master/state.json.md
index 8989a8e..8466f7d 100644
--- a/docs/endpoints/master/state.json.md
+++ b/docs/endpoints/master/state.json.md
@@ -19,6 +19,8 @@ Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
 found.
 This endpoint shows information about the frameworks, tasks,
 executors and agents running in the cluster as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 Example (**Note**: this is not exhaustive):
 
@@ -93,4 +95,10 @@ Example (**Note**: this is not exhaustive):
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/state.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/state.md b/docs/endpoints/master/state.md
index 9bb753a..eba9b39 100644
--- a/docs/endpoints/master/state.md
+++ b/docs/endpoints/master/state.md
@@ -19,6 +19,8 @@ Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
 found.
 This endpoint shows information about the frameworks, tasks,
 executors and agents running in the cluster as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 Example (**Note**: this is not exhaustive):
 
@@ -93,4 +95,10 @@ Example (**Note**: this is not exhaustive):
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/tasks.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/tasks.json.md b/docs/endpoints/master/tasks.json.md
index 5d2c0e6..d276f27 100644
--- a/docs/endpoints/master/tasks.json.md
+++ b/docs/endpoints/master/tasks.json.md
@@ -18,6 +18,8 @@ current master is not the leader.
 Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
 found.
 Lists known tasks.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 Query parameters:
 
@@ -28,4 +30,10 @@ Query parameters:
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of tasks they are
+allowed to view.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/tasks.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/tasks.md b/docs/endpoints/master/tasks.md
index c7df686..64ce46c 100644
--- a/docs/endpoints/master/tasks.md
+++ b/docs/endpoints/master/tasks.md
@@ -18,6 +18,8 @@ current master is not the leader.
 Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be
 found.
 Lists known tasks.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 Query parameters:
 
@@ -28,4 +30,10 @@ Query parameters:
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of tasks they are
+allowed to view.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/teardown.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/teardown.md b/docs/endpoints/master/teardown.md
index 4c14f59..3ab4824 100644
--- a/docs/endpoints/master/teardown.md
+++ b/docs/endpoints/master/teardown.md
@@ -23,4 +23,10 @@ framework to tear down.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to teardown frameworks requires that the
+current principal is authorized to teardown frameworks created
+by the principal who created the framework.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/master/unreserve.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/master/unreserve.md b/docs/endpoints/master/unreserve.md
index 5cce428..f064239 100644
--- a/docs/endpoints/master/unreserve.md
+++ b/docs/endpoints/master/unreserve.md
@@ -29,4 +29,10 @@ the resources to be unreserved.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+Using this endpoint to unreserve resources requires that the
+current principal is authorized to unreserve resources created
+by the principal who reserved the resources.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/slave/api/v1.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/api/v1.md b/docs/endpoints/slave/api/v1.md
index c867d79..b394f7f 100644
--- a/docs/endpoints/slave/api/v1.md
+++ b/docs/endpoints/slave/api/v1.md
@@ -16,4 +16,5 @@ Returns 200 OK if the call is successful
 
 
 ### AUTHENTICATION ###
-This endpoint does not require authentication.
\ No newline at end of file
+This endpoint requires authentication iff HTTP authentication is
+enabled.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/slave/flags.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/flags.md b/docs/endpoints/slave/flags.md
index 3ea38c1..b2740e6 100644
--- a/docs/endpoints/slave/flags.md
+++ b/docs/endpoints/slave/flags.md
@@ -13,8 +13,4 @@ Exposes the agent's flag configuration.
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
-
-### AUTHORIZATION ###
-The request principal should be authorized to query this endpoint.
-See the authorization documentation for details.
\ No newline at end of file
+enabled.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/slave/state.json.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/state.json.md b/docs/endpoints/slave/state.json.md
index ac85369..0f82c19 100644
--- a/docs/endpoints/slave/state.json.md
+++ b/docs/endpoints/slave/state.json.md
@@ -14,6 +14,8 @@ Information about state of the Agent.
 ### DESCRIPTION ###
 This endpoint shows information about the frameworks, executors
 and the agent's master as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 Example (**Note**: this is not exhaustive):
 
@@ -102,4 +104,10 @@ Example (**Note**: this is not exhaustive):
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/mesos/blob/d2106c8f/docs/endpoints/slave/state.md
----------------------------------------------------------------------
diff --git a/docs/endpoints/slave/state.md b/docs/endpoints/slave/state.md
index c7b61d7..b34459e 100644
--- a/docs/endpoints/slave/state.md
+++ b/docs/endpoints/slave/state.md
@@ -14,6 +14,8 @@ Information about state of the Agent.
 ### DESCRIPTION ###
 This endpoint shows information about the frameworks, executors
 and the agent's master as a JSON object.
+The information shown might be filtered based on the user
+accessing the endpoint.
 
 Example (**Note**: this is not exhaustive):
 
@@ -102,4 +104,10 @@ Example (**Note**: this is not exhaustive):
 
 ### AUTHENTICATION ###
 This endpoint requires authentication iff HTTP authentication is
-enabled.
\ No newline at end of file
+enabled.
+
+### AUTHORIZATION ###
+This endpoint might be filtered based on the user accessing it.
+For example a user might only see the subset of frameworks,
+tasks, and executors they are allowed to view.
+See the authorization documentation for details.
\ No newline at end of file


[2/2] mesos git commit: Added missing AUTHORIZATION endpoint documentation.

Posted by al...@apache.org.
Added missing AUTHORIZATION endpoint documentation.

Added endpoint documentation for the following endpoints:
* Master::Http::CREATE_VOLUMES_HELP
* Master::Http::DESTROY_VOLUMES_HELP
* Master::Http::RESERVE_HELP
* Master::Http::STATE_HELP
* Master::Http::STATESUMMARY_HELP
* Master::Http::TEARDOWN_HELP
* Master::Http::TASKS_HELP
* Master::Http::UNRESERVE_HELP
* Slave::Http::STATE_HELP

Review: https://reviews.apache.org/r/49251/


Project: http://git-wip-us.apache.org/repos/asf/mesos/repo
Commit: http://git-wip-us.apache.org/repos/asf/mesos/commit/eda3a2d5
Tree: http://git-wip-us.apache.org/repos/asf/mesos/tree/eda3a2d5
Diff: http://git-wip-us.apache.org/repos/asf/mesos/diff/eda3a2d5

Branch: refs/heads/master
Commit: eda3a2d53bcb85acbcdcb258b4e60d07e880070f
Parents: f23ef4c
Author: Joerg Schad <jo...@mesosphere.io>
Authored: Thu Jun 30 15:40:01 2016 +0200
Committer: Alexander Rukletsov <al...@apache.org>
Committed: Thu Jun 30 20:17:27 2016 +0200

----------------------------------------------------------------------
 src/master/http.cpp | 69 +++++++++++++++++++++++++++++++++++++++++-------
 src/slave/http.cpp  |  9 ++++++-
 2 files changed, 67 insertions(+), 11 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/mesos/blob/eda3a2d5/src/master/http.cpp
----------------------------------------------------------------------
diff --git a/src/master/http.cpp b/src/master/http.cpp
index e5acdb8..670b4e0 100644
--- a/src/master/http.cpp
+++ b/src/master/http.cpp
@@ -875,7 +875,12 @@ string Master::Http::CREATE_VOLUMES_HELP()
         "",
         "Please provide \"slaveId\" and \"volumes\" values designating",
         "the volumes to be created."),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "Using this endpoint to create persistent volumes requires that",
+        "the current principal is authorized to create volumes for the",
+        "specific role.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -1017,7 +1022,12 @@ string Master::Http::DESTROY_VOLUMES_HELP()
         "",
         "Please provide \"slaveId\" and \"volumes\" values designating",
         "the volumes to be destroyed."),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "Using this endpoint to destroy persistent volumes requires that",
+        "the current principal is authorized to destroy volumes created",
+        "by the principal who created the volume.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -1147,7 +1157,10 @@ string Master::Http::FRAMEWORKS_HELP()
         "current master is not the leader.",
         "Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be",
         "found."),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "This endpoint might be filtered based on the user accessing it.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -1710,7 +1723,12 @@ string Master::Http::RESERVE_HELP()
         "",
         "Please provide \"slaveId\" and \"resources\" values designating",
         "the resources to be reserved."),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "Using this endpoint to reserve resources requires that the",
+        "current principal is authorized to reserve resources for the",
+        "specific role.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -2082,6 +2100,8 @@ string Master::Http::STATE_HELP()
         "found.",
         "This endpoint shows information about the frameworks, tasks,",
         "executors and agents running in the cluster as a JSON object.",
+        "The information shown might be filtered based on the user",
+        "accessing the endpoint.",
         "",
         "Example (**Note**: this is not exhaustive):",
         "",
@@ -2152,7 +2172,12 @@ string Master::Http::STATE_HELP()
         "    \"unregistered_frameworks\" : []",
         "}",
         "```"),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "This endpoint might be filtered based on the user accessing it.",
+        "For example a user might only see the subset of frameworks,",
+        "tasks, and executors they are allowed to view.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -2510,8 +2535,15 @@ string Master::Http::STATESUMMARY_HELP()
         "Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be",
         "found.",
         "This endpoint gives a summary of the state of all tasks and",
-        "registered frameworks in the cluster as a JSON object."),
-    AUTHENTICATION(true));
+        "registered frameworks in the cluster as a JSON object.",
+        "The information shown might be filtered based on the user",
+        "accessing the endpoint."),
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "This endpoint might be filtered based on the user accessing it.",
+        "For example a user might only see the subset of frameworks",
+        "they are allowed to view.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -2855,7 +2887,12 @@ string Master::Http::TEARDOWN_HELP()
         "found.",
         "Please provide a \"frameworkId\" value designating the running",
         "framework to tear down."),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "Using this endpoint to teardown frameworks requires that the",
+        "current principal is authorized to teardown frameworks created",
+        "by the principal who created the framework.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -2994,6 +3031,8 @@ string Master::Http::TASKS_HELP()
         "Returns 503 SERVICE_UNAVAILABLE if the leading master cannot be",
         "found.",
         "Lists known tasks.",
+        "The information shown might be filtered based on the user",
+        "accessing the endpoint.",
         "",
         "Query parameters:",
         "",
@@ -3003,7 +3042,12 @@ string Master::Http::TASKS_HELP()
         ">        order=(asc|desc)     Ascending or descending sort order "
         "(default is descending)."
         ""),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "This endpoint might be filtered based on the user accessing it.",
+        "For example a user might only see the subset of tasks they are",
+        "allowed to view.",
+        "See the authorization documentation for details."));
 }
 
 
@@ -3773,7 +3817,12 @@ string Master::Http::UNRESERVE_HELP()
         "",
         "Please provide \"slaveId\" and \"resources\" values designating",
         "the resources to be unreserved."),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "Using this endpoint to unreserve resources requires that the",
+        "current principal is authorized to unreserve resources created",
+        "by the principal who reserved the resources.",
+        "See the authorization documentation for details."));
 }
 
 

http://git-wip-us.apache.org/repos/asf/mesos/blob/eda3a2d5/src/slave/http.cpp
----------------------------------------------------------------------
diff --git a/src/slave/http.cpp b/src/slave/http.cpp
index 44d8cc9..335b773 100644
--- a/src/slave/http.cpp
+++ b/src/slave/http.cpp
@@ -718,6 +718,8 @@ string Slave::Http::STATE_HELP() {
     DESCRIPTION(
         "This endpoint shows information about the frameworks, executors",
         "and the agent's master as a JSON object.",
+        "The information shown might be filtered based on the user",
+        "accessing the endpoint.",
         "",
         "Example (**Note**: this is not exhaustive):",
         "",
@@ -802,7 +804,12 @@ string Slave::Http::STATE_HELP() {
         "    },",
         "}",
         "```"),
-    AUTHENTICATION(true));
+    AUTHENTICATION(true),
+    AUTHORIZATION(
+        "This endpoint might be filtered based on the user accessing it.",
+        "For example a user might only see the subset of frameworks,",
+        "tasks, and executors they are allowed to view.",
+        "See the authorization documentation for details."));
 }