[ 
https://issues.apache.org/jira/browse/TS-3358?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Leif Hedstrom updated TS-3358:
------------------------------
    Summary: Add access checking to the management API  (was: add access 
checking to the management API)

> Add access checking to the management API
> -----------------------------------------
>
>                 Key: TS-3358
>                 URL: https://issues.apache.org/jira/browse/TS-3358
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: Configuration, Management API
>            Reporter: James Peach
>            Assignee: James Peach
>             Fix For: 5.3.0
>
>
> Many of the most common uses of the management API are checking metrics and 
> configuration values. For these read-only cases, running {{traffic_line}} as 
> root is overkill. Add unix domain socket credential checking so that we can 
> allow read-only operations to be performed by unprivileged processes. This 
> change also adds a configuration option to retain the current behaviour 
> (retained by default).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to