Colin McCabe created KAFKA-14265: ------------------------------------ Summary: Prefix ACLs may shadow other prefix ACLs Key: KAFKA-14265 URL: https://issues.apache.org/jira/browse/KAFKA-14265 Project: Kafka Issue Type: Bug Reporter: Colin McCabe Assignee: Colin McCabe
Prefix ACLs may shadow other prefix ACLs. Consider the case where we have prefix ACLs for foobar, fooa, and f. If we were matching a resource named "foobar", we'd start scanning at the foobar ACL, hit the fooa ACL, and stop -- missing the f ACL. To fix this, we should re-scan for ACLs at the first divergence point (in this case, f) whenever we hit a mismatch of this kind. -- This message was sent by Atlassian Jira (v8.20.10#820010)