tree 39b17aea8392613913be7350518ecd1ef142f3f3
parent ebf3cfe136bd75ade026da9ad22831dd4d6ce3d3
author Akhilesh C <akhileshchg@users.noreply.github.com> 1663707258 -0700
committer David Arthur <mumrah@gmail.com> 1663707284 -0400

KAFKA-14214: Introduce read-write lock to StandardAuthorizer for consistent ACL reads. (#12628)

Fixes an issue with StandardAuthorizer#authorize that allowed inconsistent results. The underlying 
concurrent data structure (ConcurrentSkipListMap) had weak consistency guarantees. This meant
that a concurrent update to the authorizer data could result in the authorize function processing 
ACL updates out of order.

This patch replaces the concurrent data structures with regular non-thread safe equivalents and uses
a read/write lock for thread safety and strong consistency.

Reviewers: David Arthur <mumrah@gmail.com>, Jason Gustafson <jason@confluent.io>, Colin P. McCabe <cmccabe@apache.org>, Luke Chen <showuon@gmail.com>