Nihal Jain created HBASE-27792:
----------------------------------

             Summary: Guard Master/RS Dump Servlet behind admin walls
                 Key: HBASE-27792
                 URL: https://issues.apache.org/jira/browse/HBASE-27792
             Project: HBase
          Issue Type: Improvement
          Components: security, UI
            Reporter: Nihal Jain
            Assignee: Nihal Jain


Currently RSDumpServlet and MasterDumpServlet do not require any check for 
whether the user has privileges to access to instrumentation servlets.

This is unlike other servlets like ProfileServlet, ConfServlet, JMXJsonServlet 
etc. which are guarded by admin checks.

Goal of this JIRA is to add similar check for RS and Master Dump Servlet.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to