Uploaded image for project: 'Spark'
  1. Spark
  2. SPARK-19652

REST API does not perform user auth for individual apps

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.0, 2.1.0
    • Fix Version/s: 2.0.3, 2.1.1, 2.2.0
    • Component/s: Web UI
    • Labels:
      None

      Description

      (This goes back further than 2.0.0, btw.)

      The REST API currently only performs authorization at the root of the UI; this works for live UIs, but not for the history server, where the root allows everybody to read data. That means that currently any user can see any application in the SHS through the REST API, when auth is enabled.

      Instead, the REST API should behave like the regular UI and perform authentication at the app level too.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                vanzin Marcelo Masiero Vanzin
                Reporter:
                vanzin Marcelo Masiero Vanzin
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: