Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

When creating ACLs, the MetadataVersion is passed into AclControlManager.createAcls() (following the same pattern as DelegationTokenControlManager) and threaded through to validateNewAcl(), which calls validateHostPattern(): 

This ensures that:


  • (i.) IPv4 prefix length is 0-32 (enforced by SubnetUtils);
  • (ii.) IPv6 prefix length is 0-128 (enforced by SubnetUtils6) and
  • (iii.) invalid patterns are rejected with clear error message.

...