[GitHub] [pinot] Jackie-Jiang commented on issue #11399: ACL allows user to perform any action in endpoints not related to tables, such as /zk, /instances, etc

["Jackie-Jiang (via GitHub)" <gi...@apache.org>]

Jackie-Jiang commented on issue #11399:
URL: https://github.com/apache/pinot/issues/11399#issuecomment-1688657137

   Thanks for reporting the issue!
   This framework is controller by the `Authenticate` annotation, and I do see it added for these ZK APIs (In `ZookeeperResource` introduced in #6507), so I don't know why the check is bypassed.
   @sajjad-moradi Does it work properly in your environment?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@pinot.apache.org
For additional commands, e-mail: commits-help@pinot.apache.org