rzo1 opened a new pull request, #9002: URL: https://github.com/apache/storm/pull/9002
`createStateInZookeeper` calls `state.setupBlob(...)`, which creates and mutates persistent znodes in the cluster ZooKeeper, with no `checkAuthorization` while every neighbouring blob endpoint has one. Extends `NimbusTest`. Scope: this makes the operation authorizer-visible and blockable. Under the shipped `SimpleACLAuthorizer` defaults (empty `nimbus.users`) any authenticated principal is still permitted, so this does not on its own restrict who may call it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
