[AMBARI-20874] Mask passwords in Request resource responses

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.2.2
• Fix Version/s: 3.0.0, 2.5.1, 2.4.3
• Component/s: ambari-server
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 27/Apr/17 15:59
• Updated: 02/May/17 15:26
• Resolved: 02/May/17 14:54

Description

Mask the data for sensitive fields and properties in Request resource responses to protect that data.

org.apache.ambari.server.utils.SecretReference#maskPasswordInPropertyMap is used org.apache.ambari.server.controller.internal.StageResourceProvider to protected sensitive data. The same technique should be used in org.apache.ambari.server.controller.internal.RequestResourceProvider.

Issue Links

• links to: ReviewBoard