Hi Edo, Mickael,

The intent of this KIP seems to be rather similar to KIP-231 (Improve the 
Required ACL of ListGroups API).
The feedback I received on that KIP was to allow for backward 
compatibility, and, as a result, the Describe(Cluster) ACL was preserved; 
and a Describe(Group) ACL was introduced.
I am wondering if both KIPs should follow the same principles in that 
regard.

Thanks.
--Vahid



From:   Edoardo Comar <eco...@uk.ibm.com>
To:     dev <dev@kafka.apache.org>
Date:   03/29/2018 06:51 AM
Subject:        [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API



Hi all,

We have submitted KIP-277 to give users permission to manage the lifecycle 

of a defined set of topics;
the current ACL checks are for permission to create *any* topic and on 
delete for permission against the *named* topics.

https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_KAFKA_KIP-2D277-2B-2D-2BFine-2BGrained-2BACL-2Bfor-2BCreateTopics-2BAPI&d=DwIBAg&c=jf_iaSHvJObTbx-siA1ZOg&r=Q_itwloTQj3_xUKl7Nzswo6KE4Nj-kjJc7uSVcviKUc&m=fFqzioVsBbv-HQSz8mOPYfz25CJAudbGSgJ3JItDVeE&s=DzzeKHrh6r3G5Elm179qbdDLf9OC6e67zqR7d4vnre0&e=


Feedback and suggestions are welcome, thanks.

Edo & Mickael
--------------------------------------------------

Edoardo Comar

IBM Message Hub

IBM UK Ltd, Hursley Park, SO21 2JN
Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU




Reply via email to