[
https://issues.apache.org/jira/browse/STORM-229?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Joseph Evans updated STORM-229:
--------------------------------------
Assignee: Derek Dagit
> Lock Down File Downloads
> ------------------------
>
> Key: STORM-229
> URL: https://issues.apache.org/jira/browse/STORM-229
> Project: Apache Storm (Incubating)
> Issue Type: Sub-task
> Reporter: Robert Joseph Evans
> Assignee: Derek Dagit
> Fix For: feature-security
>
>
> The file upload API for storm will put files in a specific directory, but the
> download API is fairly wide open and could potentially be used to download
> more then it should.
> We should lock this down do that only files that have been uploaded can be
> downloaded again.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
