Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-05-01 Thread Edoardo Comar
04/17/2018 03:52 AM > Subject: Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics > API > > > > Thanks Vahid, > > as described in the rejected section, we wanted to get feedback on the > point : > > An alternative that we want to discuss with the comm

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-17 Thread Vahid S Hashemian
SO21 2JN From: "Vahid S Hashemian" To: dev@kafka.apache.org Date: 04/04/2018 16:41 Subject:Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Hi Edo, Mickael, The intent of this KIP seems to be rather similar to KIP-231 (Improve the Required ACL of Li

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-17 Thread Guozhang Wang
ck we'll revise the kip by > including, not rejecting that approach. > This is still much simpler than wildcard support and goes some way towards > > having a better fine grained topic authorization support. > > Edo > --

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-17 Thread Edoardo Comar
rsley Park, SO21 2JN From: Colin McCabe To: dev@kafka.apache.org Date: 11/04/2018 16:18 Subject:Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Hi Edoardo, Permissions on the Cluster singleton are very powerful. For example, ALTER CLUSTER gives you the abili

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-17 Thread Edoardo Comar
td, Hursley Park, SO21 2JN From: Colin McCabe To: dev@kafka.apache.org Date: 11/04/2018 16:18 Subject: Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Hi Edoardo, Permissions on the Cluster singleton are very powerful. For example, ALTER CLUSTER gives you the

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-17 Thread Edoardo Comar
From: "Vahid S Hashemian" To: dev@kafka.apache.org Date: 04/04/2018 16:41 Subject:Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Hi Edo, Mickael, The intent of this KIP seems to be rather similar to KIP-231 (Improve the Required ACL of ListGroups API)

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-11 Thread Colin McCabe
Hi Edoardo, Permissions on the Cluster singleton are very powerful. For example, ALTER CLUSTER gives you the ability to add or remove any other ACLs you like (essentially unlimited permissions). ALTERCONFIGS CLUSTER give syou the ability to reconfigure the brokers, and so forth. The general

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-04-04 Thread Vahid S Hashemian
introduced. I am wondering if both KIPs should follow the same principles in that regard. Thanks. --Vahid From: Edoardo Comar To: dev Date: 03/29/2018 06:51 AM Subject:[DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Hi all, We have submitted KIP-277 to give users

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-03-29 Thread Matt Farmer
Thanks for this KIP. I can think of some ways we would apply this. I, too, am ~ on the compatibility story though, however I'm not sure which way I'd prefer we go at this moment. On Thu, Mar 29, 2018 at 4:36 PM, Ismael Juma wrote: > Thanks for the KIP. I think this is going in the right directio

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-03-29 Thread Edoardo Comar
Park, SO21 2JN From: Ismael Juma To: dev Date: 29/03/2018 21:37 Subject: Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Sent by:isma...@gmail.com Thanks for the KIP. I think this is going in the right direction, but we need a better compatibility story. A

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-03-29 Thread Edoardo Comar
zations. cheers Edo -- Edoardo Comar IBM Message Hub IBM UK Ltd, Hursley Park, SO21 2JN From: Stephane Maarek To: dev@kafka.apache.org Date: 29/03/2018 18:11 Subject: Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API Not against, but this needs to support regex f

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-03-29 Thread Ismael Juma
Thanks for the KIP. I think this is going in the right direction, but we need a better compatibility story. Also, it's worth considering whether we want to tackle better wildcard support at the same time. Ismael On Thu, Mar 29, 2018 at 6:51 AM, Edoardo Comar wrote: > Hi all, > > We have submitt

Re: [DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-03-29 Thread Stephane Maarek
Not against, but this needs to support regex for support for Kafka streams application that create many topics with complex names On Thu., 29 Mar. 2018, 7:21 pm Edoardo Comar, wrote: > Hi all, > > We have submitted KIP-277 to give users permission to manage the lifecycle > of a defined set of to

[DISCUSS] KIP-277 - Fine Grained ACL for CreateTopics API

2018-03-29 Thread Edoardo Comar
Hi all, We have submitted KIP-277 to give users permission to manage the lifecycle of a defined set of topics; the current ACL checks are for permission to create *any* topic and on delete for permission against the *named* topics. https://cwiki.apache.org/confluence/display/KAFKA/KIP-277+-+Fin