You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@spark.apache.org by "Andrew Or (JIRA)" <ji...@apache.org> on 2014/09/12 02:29:33 UTC

[jira] [Closed] (SPARK-3429) Don't include the empty string "" as a defaultAclUser

     [ https://issues.apache.org/jira/browse/SPARK-3429?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Or closed SPARK-3429.
----------------------------
       Resolution: Fixed
    Fix Version/s: 1.2.0
                   1.1.1
         Assignee: Andrew Ash

https://github.com/apache/spark/pull/2286

> Don't include the empty string "" as a defaultAclUser
> -----------------------------------------------------
>
>                 Key: SPARK-3429
>                 URL: https://issues.apache.org/jira/browse/SPARK-3429
>             Project: Spark
>          Issue Type: Bug
>          Components: Spark Core
>    Affects Versions: 1.1.0
>            Reporter: Andrew Ash
>            Assignee: Andrew Ash
>             Fix For: 1.1.1, 1.2.0
>
>
> The empty string is included as a default ACL user for reads and admin permissions.  I'm unsure if it's a security bug, but we should exclude this "" user as it's an obvious bug.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org