This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch fix/nimbus-credentials-owner-check
in repository https://gitbox.apache.org/repos/asf/storm.git
from 23fdf7e1f Check the calling principal against the topology owner in
uploadNewCredentials
add c1c3338fd Generate tuple tree ids from a key stream instead of a
recoverable linear congruential generator (#8989)
add 4af262d17 Remove DRPC per-function request queues once they are empty
(#8985)
add 053570037 Validate topology.blobstore.map in rebalance conf overrides
against the calling user (#8999)
add b8c71da61 Evaluate nimbus.groups when nimbus.users is empty (#8998)
add 94b408891 Evaluate authorization for requests that carry no principal
(#9005)
add 0441cfc2b Apply the nimbus ACLs to listBlobs so callers only see blobs
they may read (#9000)
add c8a1474a6 Read and check the docker command file before changing
worker directory ownership
add 1b3dcc12d Authorize createStateInZookeeper requests like the other
blob operations
add 9a6490a0f Filter the topology history by the authenticated caller
rather than the requested user name (#9003)
add 14896795d Merge remote-tracking branch 'origin/master' into
fix/nimbus-credentials-owner-check
No new revisions were added by this update.
Summary of changes:
.../jvm/org/apache/storm/executor/Executor.java | 3 +-
.../auth/authorizer/SimpleACLAuthorizer.java | 15 +-
.../authorizer/SupervisorSimpleACLAuthorizer.java | 6 +-
.../org/apache/storm/utils/KeyStreamRandom.java | 107 ++++++++++++++
.../apache/storm/executor/SpoutExecutorTest.java | 28 ++++
.../auth/authorizer/SimpleACLAuthorizerTest.java | 104 ++++++++++++++
.../SupervisorSimpleACLAuthorizerTest.java | 65 +++++++++
.../jvm/org/apache/storm/tuple/MessageIdTest.java | 99 +++++++++++++
storm-core/src/native/worker-launcher/impl/main.c | 6 +-
.../native/worker-launcher/impl/worker-launcher.c | 33 ++++-
.../native/worker-launcher/impl/worker-launcher.h | 12 ++
.../java/org/apache/storm/daemon/drpc/DRPC.java | 48 +++++--
.../org/apache/storm/daemon/nimbus/Nimbus.java | 69 +++++++--
.../org/apache/storm/daemon/drpc/DRPCTest.java | 105 ++++++++++++++
.../org/apache/storm/daemon/nimbus/NimbusTest.java | 160 +++++++++++++++++++++
15 files changed, 829 insertions(+), 31 deletions(-)
create mode 100644
storm-client/src/jvm/org/apache/storm/utils/KeyStreamRandom.java
create mode 100644
storm-client/test/jvm/org/apache/storm/security/auth/authorizer/SupervisorSimpleACLAuthorizerTest.java
create mode 100644
storm-client/test/jvm/org/apache/storm/tuple/MessageIdTest.java
