[
https://issues.apache.org/jira/browse/NIFI-2486?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15408316#comment-15408316
]
ASF GitHub Bot commented on NIFI-2486:
--------------------------------------
GitHub user mcgilman opened a pull request:
https://github.com/apache/nifi/pull/792
Authorizing each bulletin returned through the bulletin board
NIFI-2486:
- Authorizing individual bulletins being returned through the bulletin
board.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/mcgilman/nifi NIFI-2486
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/nifi/pull/792.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #792
----
commit 31457a2afecb44e593f25a9bd03a4142aa7861e8
Author: Matt Gilman <[email protected]>
Date: 2016-08-04T18:53:02Z
NIFI-2486:
- Authorizing individual bulletins being returned through the bulletin
board.
----
> Bulletin board needs to take into account component authorization
> -----------------------------------------------------------------
>
> Key: NIFI-2486
> URL: https://issues.apache.org/jira/browse/NIFI-2486
> Project: Apache NiFi
> Issue Type: Bug
> Reporter: Joseph Percivall
> Assignee: Matt Gilman
> Priority: Blocker
> Fix For: 1.0.0
>
>
> Currently no authorization is being done on bulletins and users could see
> bulletins for components they don't have access to. Users should only be able
> to see bulletins for the components they have "View" access for.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
