abhishekagarwal87 commented on PR #14004:
URL: https://github.com/apache/druid/pull/14004#issuecomment-1587279726

   Now I am also wondering how we will pick a persona :) For example, in this 
case, I would like to tell the user that you really need to go and check the 
logs of the broker service. The action of checking error logs is something that 
an admin persona can do. But most people when they are setting up druid for the 
first time, are end-users as well as an admin. The error occurs directly in 
response to something that an end-user is doing. 
   
   I can return a user-persona-facing error saying that "Contact your cluster 
administrator to make sure that services are operational" but it's difficult 
for new users to figure out where to go from there. 
   
   So, in this case, maybe we return an error message meant for the admin 
persona even though this error is in user-initiated request-response path. We 
leave it to cluster admins if they want to filter messages that match admin 
persona, in case they are not exposing druid directly. For a new user setting 
up druid for first time, however they will get all these messages unfiltered. 
If you have something similar in mind, we should ideally document that 
developers should avoid adding potentially sensitive information in messages 
that are meant for user persona. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to