[MESOS-6740] Authorize v1 GET_FLAGS call

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0
• Component/s: agent, security
• Labels: security
• Target Version/s: 1.2.0
• Epic Link: Agent v1 operator authz
• Sprint: Mesosphere Sprint 48
• Assignee: Alexander Rojas
• Reporter: Adam B
• Shepherd: Adam B
• Created: 07/Dec/16 08:23
• Updated: 29/Apr/19 09:27
• Resolved: 14/Dec/16 04:25

Description

We already have a VIEW_FLAGS ACL that we use for /flags and the flags part of /state. Let's add authz to the v1 GET_FLAGS API call (on agent and master) and reuse that ACL.