[ 
https://issues.apache.org/jira/browse/STORM-229?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Joseph Evans resolved STORM-229.
---------------------------------------

       Resolution: Fixed
    Fix Version/s: feature-security

Resolving this issue because it is part of the security feature branch

> Lock Down File Downloads
> ------------------------
>
>                 Key: STORM-229
>                 URL: https://issues.apache.org/jira/browse/STORM-229
>             Project: Apache Storm (Incubating)
>          Issue Type: Sub-task
>            Reporter: Robert Joseph Evans
>             Fix For: feature-security
>
>
> The file upload API for storm will put files in a specific directory, but the 
> download API is fairly wide open and could potentially be used to download 
> more then it should.
> We should lock this down do that only files that have been uploaded can be 
> downloaded again.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to