Team, I have drafted NIP-24 [1] proposing the deprecation of the Restricted annotation for removal. The proposal is the first of several potential changes to the authorization framework in Apache NiFi, with the goal of providing clear and enforceable security boundaries.
This proposal is limited in scope to the Restricted annotation and associated Required Permissions in order to keep the discussion focused on these fine-grained privileges. Regards, David Handermann [1] https://issues.apache.org/jira/projects/NIP/issues/NIP-24
