[STORM-2615] Improvements for access to topology

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Component/s: storm-client
• Assignee: Ethan Li
• Reporter: Ethan Li
• Created: 05/Jul/17 21:45
• Updated: 10/Jul/17 23:02
• Resolved: 10/Jul/17 23:01

Description

Listing a user in topology.users means that user can see the topology's storm UI, view logs, but also affect the topology, kill it, restart a worker, do profiling or heap dumps. We want to give some users access to UI and logs but not let them impact the topology.

We are proposing to add in some new configs for TOPOLOGY_UI_USERS and TOPOLOGY_UI_GROUPS, and then split the get operations off from the others in SimpleACLAuthorizer

Issue Links

• links to: GitHub Pull Request #2189