Todd Lipcon created KUDU-1896:
---------------------------------

             Summary: enable redaction of data in web UI/tracing
                 Key: KUDU-1896
                 URL: https://issues.apache.org/jira/browse/KUDU-1896
             Project: Kudu
          Issue Type: Bug
          Components: security
    Affects Versions: 1.3.0
            Reporter: Todd Lipcon
            Priority: Blocker


Currently even if security is enabled, you can use the web UI tracing/rpcz/etc 
to see current RPC traffic, including tokens returned from ConnectToMaster 
RPCs, etc. We need to enable redaction for the stringified PBs in the traces, 
and probably offer the ability to disable web UI pages entirely.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to