Ethan Li created STORM-2615:
-------------------------------

             Summary: SimpleACLAuthorizer should provide a way to restrict the 
access to Storm UI
                 Key: STORM-2615
                 URL: https://issues.apache.org/jira/browse/STORM-2615
             Project: Apache Storm
          Issue Type: Improvement
          Components: storm-client
            Reporter: Ethan Li
            Priority: Minor


Listing a user in topology.users means that user can see the topology's storm 
UI, view logs, but also affect the topology, kill it, restart a worker, do 
profiling or heap dumps. We want to give some users access to UI and logs but 
not let them impact the topology.

We are proposing to add in some new configs for TOPOLOGY_UI_USERS and 
TOPOLOGY_UI_GROUPS, and then split the get operations off from the others in 
SimpleACLAuthorizer



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to