- All Implemented Interfaces:
- ZkACLProvider
public class ConfigAwareSaslZkACLProvider
extends Object
implements ZkACLProvider
A SASL-enabled ZkACLProvider that does the following:
1) For all non-config nodes, uses the SaslZkACLProvider, i.e.
gives all permissions for the user specified in System property
"solr.authorization.superuser" (default: "solr") when using sasl,
and gives read permissions for anyone else.
2) For the /configs znode, if solr.authorization.zk.protectConfigNodes is
set to true, gives the same permissions as 1) to the configs node.
Otherwise, the configs node is open.
Designed for a "backwards compatible" setup, i.e.:
1) there are existing clients that modify znodes directly
2) there are new clients that use the ConfigSets API