[ 
https://issues.apache.org/jira/browse/MESOS-7416?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16100838#comment-16100838
 ] 

Greg Mann commented on MESOS-7416:
----------------------------------

[~arojas] I didn't catch this during review, but looking back at the above 
commit, it doesn't look like it touches the v1 handler at all?

> Filter results of `/master/slaves` and the v1 call GET_AGENTS
> -------------------------------------------------------------
>
>                 Key: MESOS-7416
>                 URL: https://issues.apache.org/jira/browse/MESOS-7416
>             Project: Mesos
>          Issue Type: Task
>          Components: HTTP API, master
>            Reporter: Alexander Rojas
>            Assignee: Alexander Rojas
>              Labels: mesosphere, security
>             Fix For: 1.4.0
>
>
> The results returned by both the endpoint {{/master/slaves}} and the API v1 
> {{GET_AGENTS}} return full information about the agent state which probably 
> need to be filtered for certain uses, particularly in a multi-tenancy 
> scenario.
> The kind of leaked data includes specific role names and their specific 
> allocations.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to