[DRILL-3780] storage plugin configurations in ZooKeeper need to be secured

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.2.0
• Fix Version/s: Future
• Assignee: Unassigned
• Reporter: Kris Hahn
• Created: 14/Sep/15 19:01
• Updated: 17/Apr/17 09:14

Description

Drill saves storage plugin configurations in ZooKeeper (distributed mode), and when authorization is enabled to prevent modification or deletion of the configurations from the Web UI (DRILL-3725, 3201, 3622), an unauthorized user can still access the configuration in ZooKeeper.