[MESOS-5707] LocalAuthorizer should error if passed a GET_ENDPOINT ACL with an unhandled path

• Type: Task
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: security
• Labels: mesosphere security
• Epic Link: Authorize operator endpoints
• Sprint: Mesosphere Sprint 38
• Story Points: 3
• Assignee: Alexander Rojas
• Reporter: Adam B
• Shepherd: Vinod Kone
• Created: 24/Jun/16 12:12
• Updated: 29/Apr/19 09:26
• Resolved: 01/Jul/16 17:41

Description

Since GET_ENDPOINT_WITH_PATH doesn't (yet) work with any arbitrary path, we should
a) validate --acls and error if GET_ENDPOINT_WITH_PATH has a path object that doesn't match an endpoint that uses this authz strategy.
b) document exactly which endpoints support GET_ENDPOINT_WITH_PATH

Issue Links

• relates to: MESOS-5712 Document exactly what is handled by GET_ENDPOINTS_WITH_PATH acl