rzo1 opened a new pull request, #9001:
URL: https://github.com/apache/storm/pull/9001
The owner check read its expected value from `credentials.get_topoOwner()`,
i.e. from data the caller supplied, and never compared it to the caller own
principal. The exception text ("is expected to be owned by X but is actually
owned by Y") shows a caller-equals-owner binding was intended.
The expected owner is now derived from the authenticated principal. Extends
`NimbusTest`.
Behaviour change: `storm upload-credentials -u <owner> <topology>` run by
anyone other than the owner now fails, including members of the topology
`topology.users` / `topology.groups` and `nimbus.admins`. Please say if you
would rather keep an admin exemption.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
