[MESOS-6474] Add fine-grained ACLs for authorization with the new debugging APIs

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Labels: debugging mesosphere security
• Target Version/s: 1.2.0
• Epic Link: Mesos Container Attach/Exec
• Sprint: Mesosphere Sprint 47
• Story Points: 5
• Assignee: Alexander Rojas
• Reporter: Kevin Klues
• Shepherd: Adam B
• Created: 24/Oct/16 22:47
• Updated: 07/Dec/16 11:05
• Resolved: 07/Dec/16 11:05

Description

We already have ACLs in place for determining if a user has access to see a certain task when querying state.json on the master/agent, or browse/download a task's sandbox. However, we will have to add similar ACLs for making sure they have the correct permissions to execute the new Debugging APs on behalf of those tasks.

Issue Links

• is related to: MESOS-6670 Authz for Agent v1 operator API