[ZOOKEEPER-1421] Support for hierarchical ACLs

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: server
• Assignee: Unassigned
• Reporter: Thomas Weise
• Created: 16/Mar/12 01:47
• Updated: 13/Apr/15 00:07

Description

Using ZK as a service, we need to restrict access to subtrees owned by different tenants. Currently there is no support for hierarchical ACLs, so it is necessary to configure the clients not only with their parent node, but also manage the ACL for each new node created in the subtree. With support for hierarchical ACLs, duplication could be avoided and the setup of the parent nodes with ACL and subsequent control of the same could be split into a separate administrative task.