[MESOS-9668] Add authorization support for the new `GET_QUOTA` call.

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.9.0
• Labels: mesosphere resource-management
• Epic Link: Quota Limits
• Sprint: Resource Mgmt RI12 Sp 43, Resource Mgmt: RI-16 51
• Story Points: 2
• Assignee: Meng Zhu
• Reporter: Meng Zhu
• Created: 21/Mar/19 23:20
• Updated: 23/Jul/19 22:35
• Resolved: 23/Jul/19 22:35

Description

The new `GET_QUOTA` call will return QUOTA_CONFIGS:

// Used in GET_QUOTA and returned by GET /quota
//
// Overall cluster quota status, including all roles, their quota configurations and current state (e.g. consumed and effective limits)
message QuotaStatus

{ repeated QuotaInfo infos [deprecated = true]; repeated QuotaConfig configs; }

Currently, the GET_QUOTA authorizable action set both value
and quota_info fields. The value field is set due to
backward compatibility for the GET_QUOTA_WITH_ROLE action.

We should make the GET_QUOTA action only set the value
field with the role name. Since the quota.QuotaInfo field
is being deprecated, it should not be set (the local authorizer
only looks at the value field, it is also probably the case
for any external authorizer modules).