[SLIDER-744] close WS/ back door for REST resources

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: Slider 0.70
• Component/s: security, Web & REST
• Sprint: Slider December #1
• Assignee: Unassigned
• Reporter: Steve Loughran
• Created: 09/Jan/15 15:37
• Updated: 18/Feb/15 17:35

Description

SLIDER-710 re-opened a back door for the ws/* REST operations, as the YARN proxy doesn't support it.
When YARN does, this back door must be blocked, otherwise unauthed users can manipulate slider clusters.
This is a simple matter of flipping a switch in org/apache/slider/slider.xml, along with test runs to verify that it is closed.

Time estimate is for functional test completion

Issue Links

• depends upon: YARN-2031 YARN Proxy model doesn't support REST APIs in AMs