public static void SetAuthACL()
{
//auth
zk.AddAuthInfo("digest", "user1:12345".GetBytes());
var aclList = new List <ACL>
{
new ACL {
Perms = 31, Id = new ZKId {
Id = "", Scheme = "auth"
}
},
};
zk.SetACL("/test", aclList, -1);
}
public void testRootAcl()
{
ZooKeeper zk = CreateClient();
// set auth using digest
zk.AddAuthInfo("digest", Encoding.UTF8.GetBytes("pat:test"));
zk.SetACL("/", Ids.CREATOR_ALL_ACL, -1);
zk.GetData("/", false, null);
zk.Dispose();
// verify no access
zk = CreateClient();
try
{
zk.GetData("/", false, null);
Assert.Fail("validate auth");
}
catch (KeeperException.NoAuthException e)
{
// expected
}
string path = "/" + Guid.NewGuid() + "apps";
try
{
zk.Create(path, null, Ids.CREATOR_ALL_ACL, CreateMode.Persistent);
Assert.Fail("validate auth");
}
catch (KeeperException.InvalidACLException e)
{
// expected
}
zk.AddAuthInfo("digest", Encoding.UTF8.GetBytes("world:anyone"));
try
{
zk.Create(path, null, Ids.CREATOR_ALL_ACL,
CreateMode.Persistent);
Assert.Fail("validate auth");
}
catch (KeeperException.NoAuthException e)
{
// expected
}
zk.Dispose();
// verify access using original auth
zk = CreateClient();
zk.AddAuthInfo("digest", Encoding.UTF8.GetBytes("pat:test"));
zk.GetData("/", false, null);
zk.Create(path, null, Ids.CREATOR_ALL_ACL, CreateMode.Persistent);
zk.Delete(path, -1);
// reset acl (back to open) and verify accessible again
zk.SetACL("/", Ids.OPEN_ACL_UNSAFE, -1);
zk.Dispose();
zk = CreateClient();
zk.GetData("/", false, null);
zk.Create(path, null, Ids.OPEN_ACL_UNSAFE, CreateMode.Persistent);
try
{
zk.Create(path, null, Ids.CREATOR_ALL_ACL, CreateMode.Persistent);
Assert.Fail("validate auth");
}
catch (KeeperException.InvalidACLException e)
{
// expected
}
zk.Delete(path, -1);
zk.AddAuthInfo("digest", Encoding.UTF8.GetBytes("world:anyone"));
zk.Create(path, null, Ids.CREATOR_ALL_ACL, CreateMode.Persistent);
zk.Dispose();
zk = CreateClient();
zk.Delete(path, -1);
}