[MESOS-7200] Add support for hierarchical roles to the local authorizer

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Component/s: master
• Labels: authorization
• Epic Link: hierarchical roles
• Sprint: Mesosphere Sprint 53
• Story Points: 5
• Assignee: Benjamin Bannier
• Reporter: Benjamin Bannier
• Shepherd: Adam B
• Created: 02/Mar/17 17:29
• Updated: 02/Mar/17 20:48
• Resolved: 02/Mar/17 20:48

Description

We should update the local authorizer so that role values for role-based actions matching whole role subhierarchies are understood, e.g., given roles a/b/c, a/b/d and a/e it should be possible to specify a role value a/b/% matching actions on roles a/b/c and a/b/d, or a value a/% matching actions on all above roles.

Issue Links

• duplicates: MESOS-7026 Update authorization / authorization-filtering to handle hierarchical roles.