capistrant opened a new pull request, #20609: URL: https://github.com/apache/druid/pull/20609
There has been some confusion about the `readOnly` authorizer in the community. Adding some extra context to the description to really drive home the fact that this is `allowAll` for `READ` actions to anyone attached to this authorizer. That includes truly all resources, such as STATE and CONFIG. An operator needs to consider this before blindly using it based solely off the name `readOnly` I also update the security model to call out the fact that `CONFIG READ` does include some higher trust things such as basic auth resources and care should be taken when giving out grants to it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
