[MESOS-7022] Update framework authorization to support multiple roles

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.3.0
• Component/s: master
• Labels: security
• Epic Link: multi-role frameworks (phase 1)
• Sprint: Mesosphere Sprint 51
• Story Points: 3
• Assignee: Benjamin Bannier
• Reporter: Benjamin Bannier
• Shepherd: Adam B
• Created: 27/Jan/17 20:50
• Updated: 26/Mar/18 08:04
• Resolved: 15/Feb/17 09:51

Description

Currently the master assumes that a framework is only in a single role, see Master::authorizeFramework. This code should be updated to support frameworks with multiple roles. In particular it should get authorization of the framework's principal to register in each of the framework's roles.

Issue Links

• is related to: MESOS-7073 Remove deprecated auhorization.Object.value proto field