Description
In the method checkAccess of class KeyAuthorizationKeyProvider, there is following code:
private void checkAccess(String aclName, UserGroupInformation ugi, KeyOpType opType) throws AuthorizationException { Preconditions.checkNotNull(aclName, "Key ACL name cannot be null"); Preconditions.checkNotNull(ugi, "UserGroupInformation cannot be null"); if (acls.isACLPresent(aclName, KeyOpType.MANAGEMENT) && (acls.hasAccessToKey(aclName, ugi, opType) || acls.hasAccessToKey(aclName, ugi, KeyOpType.ALL))) { return; } ... }
Seems that
acls.isACLPresent(aclName, KeyOpType.MANAGEMENT)
should be replaced with
acls.isACLPresent(aclName, opType)