dlmarion commented on PR #77:
URL: https://github.com/apache/accumulo-access/pull/77#issuecomment-2215088595

   > I want to add a note about normalization in the javadoc, as I don't think 
it's well defined. However, looking at ParserEvaluator 
(https://github.com/apache/accumulo-access/blob/main/src/main/java/org/apache/accumulo/access/ParserEvaluator.java#L95-L109),
 I'm not sure that it is short-circuiting.
   
   I think I have resolved this question myself, it looks like the 
short-circuiting is happening in the OR case. It's not done by stopping 
processing, but it continues processing to validate the expression but swaps 
out the test that is used to see if the token is in the auth set to a test that 
just returns `true`. The `ParserEvaluator.parseAccessExpression` is called from 
AccessExpressionImpl and AccessEvaluatorImpl. I can see why we need to validate 
the expression in AccessExpressionImpl. I'm not sure we need to re-validate the 
expression in AccessEvaluatorImpl.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to