[MESOS-2949] Draft design for generalized Authorizer interface

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: master, security
• Labels: acl mesosphere security
• Epic Link: Generalize authorizer
• Sprint: Mesosphere Sprint 15, Mesosphere Sprint 16, Mesosphere Sprint 17, Mesosphere Sprint 18, Mesosphere Sprint 19, Mesosphere Sprint 20, Mesosphere Sprint 21
• Story Points: 3
• Assignee: Alexander Rojas
• Reporter: Alexander Rojas
• Shepherd: Till Toenshoff
• Created: 26/Jun/15 14:24
• Updated: 29/Apr/19 09:27
• Resolved: 26/Nov/18 12:20

Description

As mentioned in MESOS-2948 the current mesos::Authorizer interface is rather inflexible if new Actions or Objects need to be added.

A new API needs to be designed in a way that allows for arbitrary Actions and Objects to be added to the authorization mechanism without having to recompile mesos.

Issue Links

• blocks: MESOS-2950 Implement current mesos Authorizer in terms of generalized Authorizer interface
• blocks: MESOS-3854 Finalize design for generalized Authorizer interface