[jira] [Created] (KAFKA-3069) Fix recursion in ZkSecurityMigrator

["Flavio Junqueira (JIRA)" <ji...@apache.org>]

Flavio Junqueira created KAFKA-3069:
---------------------------------------

             Summary: Fix recursion in ZkSecurityMigrator
                 Key: KAFKA-3069
                 URL: https://issues.apache.org/jira/browse/KAFKA-3069
             Project: Kafka
          Issue Type: Bug
          Components: security
    Affects Versions: 0.9.0.0
            Reporter: Flavio Junqueira
             Fix For: 0.9.0.1


The zk migrator tool recursively sets ACLs starting with the root, which we initially assumed was either the root of a dedicated ensemble or a chroot. However, there are at least two reasons for not doing it this way. First, shared ensembles might not really follow the practice of separating applications into branches, essentially creating a chroot for each. Second, there are paths we don't want to secure, like the ConsumersPath.

To fix this, we simply need to set the root ACL separately and start the recursion on each of the persistent paths to secure.  



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)