[
https://issues.apache.org/jira/browse/KAFKA-2808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15000874#comment-15000874
]
Thomas Graves edited comment on KAFKA-2808 at 11/11/15 6:44 PM:
----------------------------------------------------------------
I haven't looked a the pull request but I'm not sure that really solves this
problem because I again would have to explicitly set it.
I guess perhaps namespaces can help solve this. Or if we could do acls on
wildcard topics.
In this particular use case at least the topics will all have the same prefix
but the suffix part is unknown and can change.
What do you see as the problem with automatically giving WRITE permissions to
the creator? If you trust them enough to CREATE the topic wouldn't it
generally mean they should be allowed to write also.
was (Author: tgraves):
I haven't looked a the pull request but I'm not sure that really solves this
problem because I again would have to explicitly set it.
I guess perhaps namespaces can help solve this. Or if we could do acls on
wildcard topics.
In this particular use case at least the topics will all have the same prefix
but the suffix part is unknown and can change.
What do you see as the problem with automatically giving WRITE permissions to
the creator? If you trust them enough to CREATE the topic would it generally
mean they should be allowed to write also.
> Support auto.create.topics.enable with automatic WRITE permissions for
> creator
> -------------------------------------------------------------------------------
>
> Key: KAFKA-2808
> URL: https://issues.apache.org/jira/browse/KAFKA-2808
> Project: Kafka
> Issue Type: Improvement
> Components: core
> Affects Versions: 0.9.0.0
> Reporter: Thomas Graves
>
> we have a user that wants to use the topic auto create functionality and
> automatically have it give WRITE permissions so that they don't have to
> explicitly create and grant acls ahead of time or make explicit call.
> it seems like if you have auto.create.topics.enable enabled and the user has
> CREATE acls we could automatically just give WRITE acls to the user who
> creates the topic. Without that the auto create topics with acls doesn't add
> much benefit.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
