*Setup:*
Superuser = "User:superman"

ACLs added to system
new StandardAcl(TOPIC, "foo", PREFIXED, "User:alice", WILDCARD, READ, DENY)
new StandardAcl(TOPIC, "foobar", LITERAL, "User:alice", WILDCARD, READ,
ALLOW)
new StandardAcl(TOPIC, "foo", PREFIXED, "User:bob", WILDCARD, READ, ALLOW)

ALLOW_EVERYONE_IF_NO_ACL_IS_FOUND_CONFIG = "true"

AuthorizerContext requestContext = MockAuthorizableRequestContext with
    principal = User:alice
    host = InetAddress.getLocalHost()


*Method Call:*

authorizer.authorizeByResourceType(requestContext, READ, TOPIC)

*Question:*

Should the result be true because there is a LITERAL READ ALLOW on "foobar"
or should the result be false because there is an overriding PREFIXED READ
DENY on "foo" ?



--
LinkedIn: http://www.linkedin.com/in/claudewarren

Reply via email to