Project: mesos
Issue MESOS-5588: Improve error handling when parsing acls.
During parsing of the authorizer errors are ignored. This can lead to undetected security issues. Consider the following acl with an typo (usr instead of user) {code} "view_frameworks": [ { "principals": { "type": "ANY" }, "usr": { "type": "NONE" } } ] {code} When the master is started with these flags it will interprete the acl int he following way which gives any principal access to any framework. {noformat} view_frameworks { principals { type: ANY } } {noformat}
Story points: 5