[ZOOKEEPER-3999] zkTxnLogToolkit tool should have a user-password authentication to avoid data security issues

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Component/s: scripts
• Assignee: Ling Mao
• Reporter: Ling Mao
• Created: 12/Nov/20 13:48
• Updated: 12/Nov/20 15:36
• Resolved: 12/Nov/20 13:55

Description

we now can use zkTxnLogToolkit.sh to view data directly. For example:

./zkTxnLogToolkit.sh /data/software/zookeeper/zkdataLog/version-2/log.fa9c00000001


2020-11-12 21:43:00,864 [myid:] - INFO  [main:ZooKeeperServer@1461] - zookeeper.flushDelay=0
2020-11-12 21:43:00,864 [myid:] - INFO  [main:ZooKeeperServer@1470] - zookeeper.maxWriteQueuePollTime=0
2020-11-12 21:43:00,864 [myid:] - INFO  [main:ZooKeeperServer@1479] - zookeeper.maxBatchSize=1000
2020-11-12 21:43:00,864 [myid:] - INFO  [main:ZooKeeperServer@243] - zookeeper.intBufferStartingSizeBytes = 1024
20-3-30 下午06时35分11秒 session 0x100019a8e490000 cxid 0x0 zxid 0xfa9c00000001 createSession 30000
20-3-30 下午06时35分22秒 session 0x100019a8e490000 cxid 0x1 zxid 0xfa9c00000002 create /03-30, bob,[31,s{'world,'anyone}
],false,12012
20-3-30 下午06时40分29秒 session 0x100019a8e490000 cxid 0x2 zxid 0xfa9c00000003 create /03-30-2, alice,[31,s{'world,'anyone}
],false,12013
EOF reached after 3 txns.
EOF reached after 3 txns.

That is a rash move to make the ACL mechanism meaningless. Users can view the znode data at will.