> On July 29, 2015, 7:12 p.m., Ben Mahler wrote:
> > src/master/master.cpp, lines 2128-2159
> > <https://reviews.apache.org/r/36720/diff/3/?file=1021871#file1021871line2128>
> >
> >     Any reason you're skipping validation (authorization) of the framework? 
> > Looks like we should pull out the pid specific code from validate for now: 
> > it looks like we already have to do synchronous checks inside the 
> > continuations anyway. For example, `_reregisterFramework` checks to see if 
> > it is authenticated, but it is missing the check that it is the right 
> > principal!
> >     
> >     Looks like we should s/validate/authorize/ and pull out an 
> > `isAuthenticated` that we can call synchronously as well.
> 
> Anand Mazumdar wrote:
>     Primarily due to the reasons you had mentioned earlier. There was a lot 
> of pid specific code in validate. Also , call validation in general were 
> supposed to be handled in MESOS-2497, so I refrained from making the changes. 
> Looks like you already did them in r36919, Thanks !

Would take up validation in a different patch as we had discussed earlier. I am 
dropping the issue for now. Let me know if you think otherwise.


- Anand


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/36720/#review93499
-----------------------------------------------------------


On Aug. 4, 2015, 4:33 p.m., Anand Mazumdar wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/36720/
> -----------------------------------------------------------
> 
> (Updated Aug. 4, 2015, 4:33 p.m.)
> 
> 
> Review request for mesos, Ben Mahler and Vinod Kone.
> 
> 
> Bugs: MESOS-2294
>     https://issues.apache.org/jira/browse/MESOS-2294
> 
> 
> Repository: mesos
> 
> 
> Description
> -------
> 
> Split review out of r36318. This change adds the functionality of making a 
> http call for subscribe and the master responding with a subscribed event on 
> the persistent stream.
> 
> Also added functionality for framework failover equivalent of re-register. It 
> should now be possible to merge the subscribed(...) introduced in this review 
> and the re-factor that happened in MESOS-3182.
> 
> - Made a new function for exited()/failoverFramework for http frameworks that 
> invoke into the common continuation function for pid/http frameworks 
> thereafter.
> - The re-register functionality equivalent goes in _subscribe(...)
> 
> 
> Diffs
> -----
> 
>   src/master/http.cpp 3772e39015a22655dcad00ad844dc5ddc90db43f 
>   src/master/master.hpp ea18c4e0bb0743747401b9cd5ea14ae9b56ae3cc 
>   src/master/master.cpp 351a3c2b5f551ad065682cea601d2436258e4544 
> 
> Diff: https://reviews.apache.org/r/36720/diff/
> 
> 
> Testing
> -------
> 
> make check + adding tests in a different patch.
> 
> 
> Thanks,
> 
> Anand Mazumdar
> 
>

Reply via email to