Project: mesos
Issue MESOS-5564: Document common use cases of authorization
Our authorization documentation covers the existing functionality, but it doesn't provide a practical how-to guide to help users accomplish common authorized use cases. For example, a user recently reported that to gain full use of the web UI after upgrading to Mesos 1.0, six new ACL rules needed to be added: {{get_endpoints, view_frameworks, view_tasks, view_executors, access_sandboxes, and access_mesos_logs}}. Rather than expecting users to figure this out on their own, we should document the ACLs needed to accomplish a common goal like this. Similarly, authorizing a stateful framework to accomplish the actions it would usually be expected to perform would involve setting rules for {{register_frameworks, run_tasks, shutdown_frameworks, reserve_resources, unreserve_resources, create_volumes, and destroy_volumes}}.
Story points: 1