[ 
https://issues.apache.org/jira/browse/KAFKA-7546?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16670335#comment-16670335
 ] 

Mayuresh Gharat commented on KAFKA-7546:
----------------------------------------

[~bansalp], I believe that would depend on what principal your broker is using 
and the operations would be most of it described here :

kafka.security.auth.Operation. The ones that I can remember on top of my head 
are : Read, Write, Describe, Create.

At Linkedin, we add the Broker principal as an admin Principal dynamically at 
runtime, so if you get a request with that principal, we don't check ACLs for 
it. This is with the assumption/guarantee that no one else will be able to 
access the broker cert themselves outside Kafka broker hosts.

 

Hope this helps.

> Java implementation for Authorizer
> ----------------------------------
>
>                 Key: KAFKA-7546
>                 URL: https://issues.apache.org/jira/browse/KAFKA-7546
>             Project: Kafka
>          Issue Type: Improvement
>          Components: security
>            Reporter: Pradeep Bansal
>            Priority: Major
>         Attachments: AuthorizerImpl.PNG
>
>
> I am using kafka with authentication and authorization. I wanted to plugin my 
> own implementation of Authorizer which doesn't use zookeeper instead has 
> permission mapping in SQL database. Is it possible to write Authorizer code 
> in Java?



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to