[MESOS-5708] Add authz to /files/debug

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.0.0
• Component/s: security
• Labels: mesosphere security
• Epic Link: Authorize operator endpoints
• Sprint: Mesosphere Sprint 38
• Story Points: 3
• Assignee: Abhishek Dasgupta
• Reporter: Adam B
• Shepherd: Adam B
• Created: 24/Jun/16 12:15
• Updated: 29/Apr/19 09:27
• Resolved: 06/Jul/16 18:38

Description

The /files/debug endpoint exposes the attached master/agent log paths and every attached sandbox path, which includes the frameworkId and executorId. Even if sandboxes are protected, we still don't want to expose this information to unauthorized users.