Hi all, KIP-4 described some RPCs for implementing centralized administrative operations for Kafka. Now that the adminclient work is going forward, I'd like to re-open the discussion about the ACL-related RPCs. This is a continuation of the email thread Grant Henke started while back. (See http://search-hadoop.com/m/Kafka/uyzND18EGG22cFMXg?subj=+DISCUSS+KIP+4+ACL+Admin+Schema )
I think the idea of sending a batch of ACL-related operations all at once is good for efficiency. However, I wonder if it is simpler to separate the add and remove ACLs operations, or if we really ought to combine them into one RP It seems that when both add and remove operations are combined into one RPC, there are some thorny questions about ordering (does a delete ACL operation on a topic happen first, or an add ACL operation?) best, Colin