[ 
https://issues.apache.org/jira/browse/NIFI-2022?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Mark Payne resolved NIFI-2022.
------------------------------
    Resolution: Fixed

> Update Site-to-Site Authorization Code
> --------------------------------------
>
>                 Key: NIFI-2022
>                 URL: https://issues.apache.org/jira/browse/NIFI-2022
>             Project: Apache NiFi
>          Issue Type: Task
>          Components: Core Framework
>    Affects Versions: 1.0.0
>            Reporter: Mark Payne
>            Assignee: Matt Gilman
>            Priority: Blocker
>             Fix For: 1.0.0
>
>
> Currently, we authorize users in the StandardRootGroupPort. However, we 
> should extract the user authorization out from there and raise it up to the 
> higher levels. I.e., at the SiteToSiteResource and SocketRemoteSiteListener 
> levels. The reason for this is two-fold:
> 1. We should authorize as soon as possible in order to avoid doing work for a 
> user that is not authorized.
> 2. This brings the SiteToSiteResource inline with how we perform 
> authorization in all other Resource classes.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to