Hi Ismael, Thanks for the pointer. That's a good example of how we already implemented a similar filtering.
--Vahid From: Ismael Juma <ism...@juma.me.uk> To: dev <dev@kafka.apache.org> Date: 12/05/2017 01:24 AM Subject: Re: [DISCUSS] KIP-231: Improve the Required ACL of ListGroups API Sent by: isma...@gmail.com One comment below. On Mon, Dec 4, 2017 at 11:40 PM, Dong Lin <lindon...@gmail.com> wrote: > In my opinion this changes the semantics of ListGroupsResponse in a > counter-intuitive way. Usually we use the ACL to determine whether the > operation on the specified object can be performed or not. The response > should provide either an error message or the result for the specified > object. I couldn't remember a case where the ACL is used to filter the > result without providing error. > We do this in the metadata request that requests all topics. We just return the topics that the user has describe access to. Ismael
