Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensures correct use of ZooKeeper getAcl #1185

Merged
merged 1 commit into from
Jun 7, 2019

Conversation

ctubbsii
Copy link
Member

@ctubbsii ctubbsii commented Jun 6, 2019

This fixes a bug in Accumulo where we were using an unauthenticated
ZooKeeper session to read ACLs on a node that we had previously written.

ZooKeeper 3.4.14 fixed a bug in their code that allowed unauthenticated
connections to read ACLs on paths for which they did not have READ
permission.

Using Accumulo with that version of ZooKeeper exposed the bug in our
code that passed the incorrect ZooKeeper session when retrieving ACLs.

This fixes a bug in Accumulo where we were using an unauthenticated
ZooKeeper session to read ACLs on a node that we had previously written.

ZooKeeper 3.4.14 fixed a bug in their code that allowed unauthenticated
connections to read ACLs on paths for which they did not have READ
permission.

Using Accumulo with that version of ZooKeeper exposed the bug in our
code that passed the incorrect ZooKeeper session when retrieving ACLs.
@ctubbsii ctubbsii self-assigned this Jun 6, 2019
@ctubbsii
Copy link
Member Author

ctubbsii commented Jun 7, 2019

All ITs pass using ZooKeeper 3.4.14.

Copy link
Member

@joshelser joshelser left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good find! Thanks for the review ping.

@ctubbsii ctubbsii merged commit 3311218 into apache:1.9 Jun 7, 2019
@ctubbsii ctubbsii deleted the fix-zk-getAcl-without-auths branch June 7, 2019 16:42
asfgit pushed a commit that referenced this pull request Jun 7, 2019
@ctubbsii ctubbsii added this to the 1.10.0 milestone Jul 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants