ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Beerbower (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-7598) Views: the "properties" object should only be accessible from REST API if AMBARI.ADMIN
Date Wed, 01 Oct 2014 18:07:33 GMT
Tom Beerbower created AMBARI-7598:
-------------------------------------

             Summary: Views: the "properties" object should only be accessible from REST API
if AMBARI.ADMIN
                 Key: AMBARI-7598
                 URL: https://issues.apache.org/jira/browse/AMBARI-7598
             Project: Ambari
          Issue Type: Task
            Reporter: Tom Beerbower
            Assignee: Tom Beerbower
             Fix For: 1.7.0


/api/v1/views/FILES/versions/0.1.0/instances/FILES_1

Configuration properties for a view instance should only be accessible from the Views REST
API if you are an AMBARI.ADMIN. This protects view instance config props info from regular
users of a view. If a view client-side happens to need access to these properties for some
reason, they should implement a server-side resource in their view that exposes this information.

{code}
    "properties" : {
      "dataworker.defaultFs" : "webhdfs://c6401.ambari.apache.org:50070",
      "dataworker.username" : null
    }
{code}




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message