[HDDS-8164] SCM: Authorize secret key APIs

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Labels: blackbird ozone-performance pull-request-available
• Assignee: Duong
• Reporter: Duong
• Created: 15/Mar/23 06:14
• Updated: 17/May/23 22:41
• Resolved: 12/May/23 22:50

Description

HDDS-7830 implements secret key APIs in SCMSecurityProtocol, which for now doesn't enforce authorization (any authenticated principal can call the API).

For secret key APIs, we want to limit the access to Ozone principals only, aka, Datanode and OM. The APIs should be moved to a separate protocol to enforce authorization separately. 

Issue Links

• links to: GitHub Pull Request #4597
• mentioned in: Page Loading...