[MESOS-5704] Fine-grained authorization on /frameworks

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: master, security
• Labels: mesosphere security
• Epic Link: Authorize operator endpoints
• Sprint: Mesosphere Sprint 38
• Story Points: 3
• Assignee: Alexander Rojas
• Reporter: Adam B
• Shepherd: Vinod Kone
• Created: 24/Jun/16 12:00
• Updated: 29/Apr/19 09:27
• Resolved: 28/Jun/16 22:16

Description

Even if ACLs were defined for the actions VIEW_FRAMEWORKS,
VIEW_EXECUTORS and VIEW_TASKS, the data these actions were
supposed to protect, could still leaked through the master's
/frameworks endpoint, since it didn't enable any authorization
mechanism.