You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@zookeeper.apache.org by "Thomas Weise (Created) (JIRA)" <ji...@apache.org> on 2012/03/16 02:48:34 UTC

[jira] [Created] (ZOOKEEPER-1421) Support for hierarchical ACLs

Support for hierarchical ACLs
-----------------------------

                 Key: ZOOKEEPER-1421
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1421
             Project: ZooKeeper
          Issue Type: Improvement
          Components: server
            Reporter: Thomas Weise


Using ZK as a service, we need to restrict access to subtrees owned by different tenants. Currently there is no support for hierarchical ACLs, so it is necessary to configure the clients not only with their parent node, but also manage the ACL for each new node created in the subtree. With support for hierarchical ACLs, duplication could be avoided and the setup of the parent nodes with ACL and subsequent control of the same could be split into a separate administrative task.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (ZOOKEEPER-1421) Support for hierarchical ACLs

Posted by "Camille Fournier (Commented) (JIRA)" <ji...@apache.org>.

    [ https://issues.apache.org/jira/browse/ZOOKEEPER-1421?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13230827#comment-13230827 ] 

Camille Fournier commented on ZOOKEEPER-1421:
---------------------------------------------

This would be very useful, agreed.
                
> Support for hierarchical ACLs
> -----------------------------
>
>                 Key: ZOOKEEPER-1421
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1421
>             Project: ZooKeeper
>          Issue Type: Improvement
>          Components: server
>            Reporter: Thomas Weise
>
> Using ZK as a service, we need to restrict access to subtrees owned by different tenants. Currently there is no support for hierarchical ACLs, so it is necessary to configure the clients not only with their parent node, but also manage the ACL for each new node created in the subtree. With support for hierarchical ACLs, duplication could be avoided and the setup of the parent nodes with ACL and subsequent control of the same could be split into a separate administrative task.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira