Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-19652

REST API does not perform user auth for individual apps

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.0.0, 2.1.0
    • 2.0.3, 2.1.1, 2.2.0
    • Web UI
    • None

    Description

      (This goes back further than 2.0.0, btw.)

      The REST API currently only performs authorization at the root of the UI; this works for live UIs, but not for the history server, where the root allows everybody to read data. That means that currently any user can see any application in the SHS through the REST API, when auth is enabled.

      Instead, the REST API should behave like the regular UI and perform authentication at the app level too.

      Attachments

        Issue Links

          Activity

            People

              vanzin Marcelo Masiero Vanzin
              vanzin Marcelo Masiero Vanzin
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: