[ 
https://issues.apache.org/jira/browse/NIFI-2339?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15393910#comment-15393910
 ] 

Joseph Witt commented on NIFI-2339:
-----------------------------------

Will take a stab at this.  General issue is when error/exception conditions 
happen interacting through the REST API we cannot return the fine grained 
details any more as they could leak details users are not authorized to see.  
The component identifier is fair game but names, types, etc.. are not.

> Component details need to be removed from all error messages
> ------------------------------------------------------------
>
>                 Key: NIFI-2339
>                 URL: https://issues.apache.org/jira/browse/NIFI-2339
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework
>            Reporter: Matt Gilman
>            Assignee: Joseph Witt
>            Priority: Blocker
>             Fix For: 1.0.0
>
>
> Error and informative message often contain component details which need to 
> be scrubbed when the user is not authorized for reading that component.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to