> On May 6, 2016, 10:47 a.m., Adam B wrote: > > include/mesos/authorizer/authorizer.proto, lines 62-63 > > <https://reviews.apache.org/r/46613/diff/1-3/?file=1358708#file1358708line62> > > > > What about VIEW_EXECUTOR_WITH_INFO?
I would just keep that in a single action as we also also just have a single acl for viewing Tasks/Executors. As far as we discussed there is no need to seperate between the right to view a Task or Executor. - Joerg ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/46613/#review132008 ----------------------------------------------------------- On May 18, 2016, 10:16 p.m., Joerg Schad wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/46613/ > ----------------------------------------------------------- > > (Updated May 18, 2016, 10:16 p.m.) > > > Review request for mesos, Adam B, Alexander Rojas, and Michael Park. > > > Bugs: MESOS-5169 > https://issues.apache.org/jira/browse/MESOS-5169 > > > Repository: mesos > > > Description > ------- > > In order to allow for framework and task level filtering we introduce > the following authorizer actions: > * FILTER_FRAMEWORK_WITH_INFO > * FILTER_TASK_WITH_EXECUTOR_INFO = 13; > * FILTER_TASK_WITH_COMMAND_INFO = 14; > * FILTER_TASK_WITH_TASK = 15; > > Note that we need different actions for authorizing a tasks > based on the object being authorized. > > We also introduce the following acls for the local authorizer: > * ViewFrameworks (giving access to frameworks running > under a specific OS user > * ViewTasks view_tasks (giving access to Tasks run under a > specific OS user) > > > Diffs > ----- > > docs/authorization.md 0db5c345b3239814b3b9d2e8a87601ff69d0f869 > include/mesos/authorizer/acls.proto > 9adae8c2a2e1b2ee4b9068ea50fcebb0544f2e5d > include/mesos/authorizer/authorizer.proto > 32492a59ad95df3bb673ec42321518f86c11af59 > src/authorizer/local/authorizer.cpp > aa1a9d8e5c7fb86b6310015d93aeacb466a307ef > > Diff: https://reviews.apache.org/r/46613/diff/ > > > Testing > ------- > > make check (OSX) > > > Thanks, > > Joerg Schad > >
