[ 
https://issues.apache.org/jira/browse/STORM-2615?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ethan Li updated STORM-2615:
----------------------------
    Summary: SimpleACLAuthorizer should provide a way to restrict the access to 
topology  (was: SimpleACLAuthorizer should provide a way to restrict the access 
to Storm UI)

> SimpleACLAuthorizer should provide a way to restrict the access to topology
> ---------------------------------------------------------------------------
>
>                 Key: STORM-2615
>                 URL: https://issues.apache.org/jira/browse/STORM-2615
>             Project: Apache Storm
>          Issue Type: Improvement
>          Components: storm-client
>            Reporter: Ethan Li
>            Priority: Minor
>
> Listing a user in topology.users means that user can see the topology's storm 
> UI, view logs, but also affect the topology, kill it, restart a worker, do 
> profiling or heap dumps. We want to give some users access to UI and logs but 
> not let them impact the topology.
> We are proposing to add in some new configs for TOPOLOGY_UI_USERS and 
> TOPOLOGY_UI_GROUPS, and then split the get operations off from the others in 
> SimpleACLAuthorizer



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to