Sergey Soldatov created HDDS-15462:
--------------------------------------
Summary: Move ACL check in Volume requests to preExecute
Key: HDDS-15462
URL: https://issues.apache.org/jira/browse/HDDS-15462
Project: Apache Ozone
Issue Type: Sub-task
Reporter: Sergey Soldatov
Assignee: Sergey Soldatov
Move ACL authorization checks for volume operations (delete, set-owner,
set-quota) and volume ACL operations (add, remove, set ACL) from
validateAndUpdateCache to preExecute. This ensures ACL enforcement happens
before the Ratis log entry is written, so unauthorized requests are rejected
early on the OM leader without producing log entries.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]