@Override
      public List<ACL> getAclForPath(String path) {
        if (!isSecure || path == null || !path.contains(zkPath)) {
          // No security or the path is below the user path - full access.
          return Lists.newArrayList(ZooDefs.Ids.OPEN_ACL_UNSAFE);
        }
        return createSecureAcls();
      }
@param rootNs A single root namespace override. Not recommended.
@param nsPrefix The namespace prefix to use with default namespaces (appends 'sasl' for secure else 'unsecure'
                to namespace prefix to get effective root namespace).
@param userScopePathPrefix The prefix to use for the user-specific part of the path.
@param workerPrefix The prefix to use for each worker znode.
@param workerGroup group name to use for all workers
@param zkSaslLoginContextName SASL login context name for ZK security; null if not needed.
@param zkPrincipal ZK security principal.
@param zkKeytab ZK security keytab.
@param aclsConfig A config setting to use to determine if ACLs should be verified.
llap-client/src/java/org/apache/hadoop/hive/registry/impl/ZkRegistryBase.java