[R4.1 ubuntu16 ]able to access alarms opserver introsspect with out authentication

[aswani kumar]

R4.1 build 41 newton ubuntu16

with cloud admin enabled it should not allow to access opserver analytics without authentication

but i am able to access alarms page
http://nodea34:8081/analytics/alarms
{
analytics-node: [ ],
vrouter: [ ]
}

Its working fine with other objects

http://nodea34:8081/analytics/tables
Authentication required

http://nodea34:8081/analytics/queries
Authentication required

[Megh Bhatt (meghb)]

Issue is only related to returning empty lists, no alarms are actually returned, hence moving to medium

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/35409
Submitter: Megh Bhatt (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/35409
Committed: http://github.com/Juniper/contrail-controller/commit/81a39b3efdc9c43222c21e7b66424a3b2e19df5b
Submitter: Zuul (<email address hidden>)
Branch: master

commit 81a39b3efdc9c43222c21e7b66424a3b2e19df5b
Author: Megh Bhatt <email address hidden>
Date: Fri Sep 8 14:09:06 2017 -0700

Fix listing of alarms returned by contrail-analytics-api

The URL analytics/alarms was returning empty list of alarms
even when user did not pass in a auth token and the contrail-analytics-api
was running with aaa_mode set to cloud-admin or rbac. Fix this by
adding a check for auth token to be present in these cases.

Change-Id: I29b26ac9086998150330a67ccae594d7b6e045d7
Closes-Bug: #1714751