Rajini Sivaram created KAFKA-7702: ------------------------------------- Summary: Prefixed ACLs don't work with single character prefix Key: KAFKA-7702 URL: https://issues.apache.org/jira/browse/KAFKA-7702 Project: Kafka Issue Type: Bug Components: security Affects Versions: 2.1.0, 2.0.1 Reporter: Rajini Sivaram Assignee: Rajini Sivaram Fix For: 2.2.0, 2.1.1, 2.0.2
Prefixed ACLs with a single character are not matched correctly against resource names. ALLOW rule with single character prefix doesn't grant access to any resource and DENY rule with single character prefix doesn't deny access to any resource since the prefix is not matched correctly. This is not an exploitable security vulnerability since only authenticated users with authorization to create ACLs can create the prefixed ACLs. -- This message was sent by Atlassian JIRA (v7.6.3#76005)