This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a change to branch fix/drpc-impersonation-check
in repository https://gitbox.apache.org/repos/asf/storm.git
from ebdefd9d5 Apply the impersonation authorizer to DRPC requests
add c7bfb06cd Handle doAsUser without an authenticated user in DRPC
No new revisions were added by this update.
Summary of changes:
SECURITY.md | 1 +
docs/SECURITY.md | 1 +
.../storm/security/auth/SingleUserPrincipal.java | 5 +-
.../auth/authorizer/ImpersonationAuthorizer.java | 18 +++-
.../apache/storm/security/auth/ReqContextTest.java | 13 +++
.../security/auth/SingleUserPrincipalTest.java | 40 ++++++++
.../authorizer/ImpersonationAuthorizerTest.java | 108 +++++++++++++++++++++
.../java/org/apache/storm/daemon/drpc/DRPC.java | 9 +-
.../org/apache/storm/daemon/drpc/DRPCTest.java | 41 ++++++++
.../daemon/ui/filters/AuthorizedUserFilter.java | 14 ++-
.../apache/storm/daemon/drpc/DRPCServerTest.java | 28 ++++++
.../ui/filters/AuthorizedUserFilterTest.java | 68 +++++++++++++
12 files changed, 332 insertions(+), 14 deletions(-)
create mode 100644
storm-client/test/jvm/org/apache/storm/security/auth/SingleUserPrincipalTest.java
create mode 100644
storm-client/test/jvm/org/apache/storm/security/auth/authorizer/ImpersonationAuthorizerTest.java
