> On Dec. 9, 2016, 10:52 a.m., Adam B wrote: > > include/mesos/authorizer/acls.proto, lines 355-356 > > <https://reviews.apache.org/r/54535/diff/1/?file=1579835#file1579835line355> > > > > "The list of roles whose container metadata the principal can see."
Not using roles anymore. We are authorizing as `VIEW_TASKS` which uses _users_. - Alexander ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/54535/#review158660 ----------------------------------------------------------- On Dec. 9, 2016, 4:32 p.m., Alexander Rojas wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/54535/ > ----------------------------------------------------------- > > (Updated Dec. 9, 2016, 4:32 p.m.) > > > Review request for mesos and Adam B. > > > Bugs: MESOS-6670 > https://issues.apache.org/jira/browse/MESOS-6670 > > > Repository: mesos > > > Description > ------- > > Adds the authorization action VIEW_CONTAINERS which takes an object > of type `FrameworkInfo` and `ExecutorInfo` and optionally a > `CommandInfo`. > > It also adds the authorization action SET_LOG_LEVEL which takes no > object. > > Includes testing for the ACLs and interface. > > > Diffs > ----- > > include/mesos/authorizer/acls.proto > 3499cac43d77c371448a9c9e1ac95d42b24a54dd > include/mesos/authorizer/authorizer.proto > b7371cd580bbe64eb1566876d0f253eedbd0789d > src/authorizer/local/authorizer.cpp > 3b983d0c0dea3ad761e7c684a9f943809dc541e9 > src/tests/authorization_tests.cpp f70d60d73a64e7eb4be20a17b62a8726b659e1b8 > > Diff: https://reviews.apache.org/r/54535/diff/ > > > Testing > ------- > > make check > > > Thanks, > > Alexander Rojas > >
