ACL configuration so far was using short user-names. With the changed UserGroupInformation, short names are different from the long fully-qualified names. AccessControlList continues to use UserGroupInformation.getUserName() for verifying access control. Because of this, queue acls fail for a user "firstname.lastname@example.org" even though the short name "user" is part of the acl configuration.
|Assignee||Vinod K V [ vinodkv ]|
|Status||Open [ 1 ]||Patch Available [ 10002 ]|
|Status||Patch Available [ 10002 ]||Resolved [ 5 ]|
|Resolution||Fixed [ 1 ]|
|Fix Version/s||0.21.0 [ 12313563 ]|
|Fix Version/s||0.22.0 [ 12314296 ]|
|Status||Resolved [ 5 ]||Closed [ 6 ]|