[ 
https://issues.apache.org/jira/browse/HDDS-8164?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ritesh Shukla updated HDDS-8164:
--------------------------------
    Labels: blackbird ozone-performance pull-request-available  (was: 
pull-request-available)

> SCM: Authorize secret key APIs
> ------------------------------
>
>                 Key: HDDS-8164
>                 URL: https://issues.apache.org/jira/browse/HDDS-8164
>             Project: Apache Ozone
>          Issue Type: Sub-task
>            Reporter: Duong
>            Assignee: Duong
>            Priority: Major
>              Labels: blackbird, ozone-performance, pull-request-available
>
> HDDS-7830 implements secret key APIs in {*}SCMSecurityProtocol{*}, which for 
> now doesn't enforce authorization (any authenticated principal can call the 
> API).
> For secret key APIs, we want to limit the access to Ozone principals only, 
> aka, Datanode and OM. The APIs should be moved to a separate protocol to 
> enforce authorization separately. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to