Github user simonellistonball commented on the issue:
https://github.com/apache/metron/pull/895
Ok, so we have some authentication, with clear text passwords, but we don't
have any authorization on the end points, which causes compliance issues with
things like access change request.---
