Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 32239200B86 for ; Sun, 18 Sep 2016 11:41:23 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 30BFF160ADA; Sun, 18 Sep 2016 09:41:23 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 9F1F0160AC0 for ; Sun, 18 Sep 2016 11:41:22 +0200 (CEST) Received: (qmail 13479 invoked by uid 500); 18 Sep 2016 09:41:21 -0000 Mailing-List: contact issues-help@mesos.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@mesos.apache.org Delivered-To: mailing list issues@mesos.apache.org Received: (qmail 13464 invoked by uid 99); 18 Sep 2016 09:41:21 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 18 Sep 2016 09:41:21 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id A99682C014D for ; Sun, 18 Sep 2016 09:41:21 +0000 (UTC) Date: Sun, 18 Sep 2016 09:41:21 +0000 (UTC) From: "haosdent (JIRA)" To: issues@mesos.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (MESOS-6201) Filter containers information by principal when retrieving it from Agent. MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Sun, 18 Sep 2016 09:41:23 -0000 [ https://issues.apache.org/jira/browse/MESOS-6201?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] haosdent updated MESOS-6201: ---------------------------- Description: Now the /containers endpoint and {{GET_CONTAINERS}} API do not verify if the given principal has permissions to query the information of the containers. We should filter out those containers which the principal doesn't have permissions before return the result. > Filter containers information by principal when retrieving it from Agent. > ------------------------------------------------------------------------- > > Key: MESOS-6201 > URL: https://issues.apache.org/jira/browse/MESOS-6201 > Project: Mesos > Issue Type: Task > Reporter: haosdent > Assignee: haosdent > > Now the /containers endpoint and {{GET_CONTAINERS}} API do not verify if the given principal has permissions to query the information of the containers. We should filter out those containers which the principal doesn't have permissions before return the result. -- This message was sent by Atlassian JIRA (v6.3.4#6332)