[MESOS-5406] Validate ACLs on creating an instance of local authorizer.

• Type: Improvement
• Status: Accepted
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Labels: mesosphere security
• Epic Link: Authorization Improvements
• Assignee: Jay Guo
• Reporter: Alex R
• Created: 17/May/16 22:12
• Updated: 29/Apr/19 09:26

Description

Some combinations of ACLs are not allowed, for example, specifying both SetQuota and UpdateQuota. We should capture such issues and error out early.

This ticket aims to add as many validations as possible to a dedicated validate() routine, instead of having them implicitly in the codebase.