[STORM-349] (Security) ui actions should have nimbus like authroization

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.10.0
• Component/s: storm-core
• Labels: security
• Assignee: Harsha
• Reporter: Robert Joseph Evans
• Created: 10/Jun/14 19:39
• Updated: 22/Jan/16 16:08
• Resolved: 18/Aug/14 19:23

Description

The UI provides APIs to kill, rebalance, ... a topology. For security we originally took the route to optionally disable these, but ideally the UI server would load an IAuthorizer instance like nimbus, and check if the user is allowed to perform that operation before doing it on behalf of the user.

This should be fairly straight forward but may require some glue code like is being used in the drpc server for its web interface.