Gearpump Security

[clockfly]

This is an umbrella for multi-tenancy related issues.

• user management. Authentication/authorization/audit
• It shouldn't be possible to disturb akka clustering mechanism that is used in multi-master configuration #1074 It shouldn't be possible to disturb akka clustering mechanism that is used in multi-master configuration feature P2 security
• It shouldn't be possible to look at the other org’s applications in services console #1073 It shouldn't be possible to look at the other org’s applications in services console feature P2 security
• It shouldn't be possible to send messages to other org’s actors  #1072 It shouldn't be possible to send messages to other org’s actors feature P2 security
• It shouldn't be possible to sniff other org’s communication between actors  #1071 It shouldn't be possible to sniff other org’s communication between actors feature P2 security
• It shouldn't be possible to kill other org’s GP instance. #1070 It shouldn't be possible to kill other org’s GP instance. feature P2 security
• Gearpump multitenancy in context of security #1069 Gearpump multitenancy in context of security feature P2 security
• Gearpump Kerberos Support #1458 Gearpump Kerberos Support

[clockfly]

For the new UI with authentication, please see demo at http://52.53.210.64:8090/

[manuzhang]

"SignOut" is not shown on mobine

[clockfly]

@manuzhang
fixed in PR #1867

[manuzhang]

migrated to https://issues.apache.org/jira/browse/GEARPUMP-74