Project: mesos
Issue MESOS-4178: Add persistent volume support to the Authorizer
This ticket is the first in a series that adds authorization support for persistent volume creation and destruction. Persistent volumes should be authorized with the {{principal}} of the reserving entity (framework or master). The idea is to introduce {{Create}} and {{Destroy}} into the ACL. {code} message Create { // Subjects. required Entity principals = 1; // Objects? Perhaps the kind of volume? allowed permissions? } message Destroy { // Subjects. required Entity principals = 1; // Objects. required Entity creator_principals = 2; } {code} ACLs for volume creation and destruction must be added to {{authorizer.proto}}, and the appropriate function overloads must be added to the Authorizer.
Story points: 1