ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-7598) Views: the "properties" object should only be accessible from REST API if AMBARI.ADMIN
Date Tue, 14 Oct 2014 13:55:33 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-7598?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14170943#comment-14170943
] 

Hudson commented on AMBARI-7598:
--------------------------------

SUCCESS: Integrated in Ambari-trunk-Commit #577 (See [https://builds.apache.org/job/Ambari-trunk-Commit/577/])
AMBARI-7598 - Views: the properties object should only be accessible from REST API if AMBARI.ADMIN
(tbeerbower: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=e15399aa05c944f19ade734e63c3a79c5b631848)
* ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ViewInstanceResourceProviderTest.java
* ambari-server/src/main/java/org/apache/ambari/server/view/ViewRegistry.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ViewInstanceResourceProvider.java


> Views: the "properties" object should only be accessible from REST API if AMBARI.ADMIN
> --------------------------------------------------------------------------------------
>
>                 Key: AMBARI-7598
>                 URL: https://issues.apache.org/jira/browse/AMBARI-7598
>             Project: Ambari
>          Issue Type: Task
>            Reporter: Tom Beerbower
>            Assignee: Tom Beerbower
>             Fix For: 1.7.0
>
>         Attachments: AMBARI-7598.patch
>
>
> /api/v1/views/FILES/versions/0.1.0/instances/FILES_1
> Configuration properties for a view instance should only be accessible from the Views
REST API if you are an AMBARI.ADMIN. This protects view instance config props info from regular
users of a view. If a view client-side happens to need access to these properties for some
reason, they should implement a server-side resource in their view that exposes this information.
> {code}
>     "properties" : {
>       "dataworker.defaultFs" : "webhdfs://c6401.ambari.apache.org:50070",
>       "dataworker.username" : null
>     }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message