DomGarguilo commented on PR #3001:
URL: https://github.com/apache/accumulo/pull/3001#issuecomment-1270338186
I marked this as WIP because there is behavior that seem incorrect to me. In
the following code that I added here:
```java
// assert the test user does not have permissions to obtain a
delegation token
loginAs(rootUser);
assertFalse(root_client.securityOperations().hasSystemPermission(testUser.getPrincipal(),
SystemPermission.OBTAIN_DELEGATION_TOKEN));
// login as the test user and attempt to obtain a delegation token
loginAs(testUser);
DelegationToken token =
test_user_client.securityOperations().getDelegationToken(new
DelegationTokenConfig());
```
It checks that the `testUser` does not have the permissions to obtain a
delegation token, then successfully obtains a delegation token. Unless I am
misunderstanding something, this does not seem like it should be happening. Can
anyone confirm or deny this?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
