Github user revans2 commented on a diff in the pull request:

    https://github.com/apache/storm/pull/2504#discussion_r160242577
  
    --- Diff: 
storm-server/src/main/java/org/apache/storm/daemon/nimbus/Nimbus.java ---
    @@ -4166,4 +4184,23 @@ public void shutdown() {
         public boolean isWaiting() {
             return timer.isTimerWaiting();
         }
    +
    +    @Override
    +    public void processWorkerMetrics(WorkerMetrics metrics) throws 
org.apache.thrift.TException {
    +        if (this.metricsStore == null) {
    --- End diff --
    
    Can we add in some authorization calls before we do anything with executing 
the command?
    
    ```
    checkAuthorization(null, null, "processWorkerMetrics");
    ```
    
    Then we would need to update 
    
    
https://github.com/apache/storm/blob/7ecb3d73e8e909c01d39e03a7a7ed45a2fb81859/storm-client/src/jvm/org/apache/storm/security/auth/authorizer/SimpleACLAuthorizer.java#L52
    
    to have processWorkerMetrics in the list.



---

Reply via email to