Project: mesos
Issue MESOS-5153: Sandboxes contents should be protected from unauthorized users
MESOS-4956 introduced authentication support for the sandboxes. However, authentication can only go as far as to tell whether an user is known to mesos or not. An extra additional step is necessary to verify whether the known user is allowed to executed the requested operation on the sandbox (browse, read, download, debug).
Story points: 8