[ 
https://issues.apache.org/jira/browse/MESOS-3903?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Greg Mann updated MESOS-3903:
-----------------------------
    Description: 
We need to add ACL authorization for the '/create-volume' and '/destroy-volume' 
HTTP endpoints. In other complementary work, authorization for frameworks 
performing {{CREATE}} and {{DESTROY}} operations is being added by MESOS-3065.

This will consist of adding authorization calls into the HTTP endpoint code in 
{{src/master/http.cpp}}, as well as tests for both failed & successful calls to 
'/create-volume' and '/destroy-volume' with authorization. We also must ensure 
that the {{principal}} field of {{Resource.DiskInfo.Persistence}} is being 
populated correctly.

  was:
We need to add ACL authorization for the 'create' and 'destroy' HTTP endpoints. 
In other complementary work, authorization for frameworks performing {{CREATE}} 
and {{DESTROY}} operations is being added by MESOS-3065.

This will consist of adding authorization calls into the HTTP endpoint code in 
{{src/master/http.cpp}}, as well as tests for both failed & successful calls to 
'/create' and '/destroy' with authorization.


> Add authorization for '/create-volume' and '/destroy-volume' HTTP endpoints
> ---------------------------------------------------------------------------
>
>                 Key: MESOS-3903
>                 URL: https://issues.apache.org/jira/browse/MESOS-3903
>             Project: Mesos
>          Issue Type: Improvement
>            Reporter: Greg Mann
>            Assignee: Greg Mann
>              Labels: mesosphere, persistent-volumes
>
> We need to add ACL authorization for the '/create-volume' and 
> '/destroy-volume' HTTP endpoints. In other complementary work, authorization 
> for frameworks performing {{CREATE}} and {{DESTROY}} operations is being 
> added by MESOS-3065.
> This will consist of adding authorization calls into the HTTP endpoint code 
> in {{src/master/http.cpp}}, as well as tests for both failed & successful 
> calls to '/create-volume' and '/destroy-volume' with authorization. We also 
> must ensure that the {{principal}} field of {{Resource.DiskInfo.Persistence}} 
> is being populated correctly.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to