Re: Kafka Authorizer interface review

2018-04-03 Thread Vahid S Hashemian
issue with ListGroups API in a backward compatible way. --Vahid From: Mickael Maison To: dev Date: 04/03/2018 09:22 AM Subject:Kafka Authorizer interface review Hi all, Over the past few months the IBM Message Hub team has "played quite a bit" with the

Re: Kafka Authorizer interface review

2018-04-03 Thread Ted Yu
bq. you too are concerned about the current delete record/topic limitation Yes. I think this is a security hole. On Tue, Apr 3, 2018 at 9:37 AM, Mickael Maison wrote: > Yes this is indeed a typo! > > And yes we're considering filing another KIP but I thought collecting > all our feedback and pr

Re: Kafka Authorizer interface review

2018-04-03 Thread Mickael Maison
Yes this is indeed a typo! And yes we're considering filing another KIP but I thought collecting all our feedback and providing a full summary might be beneficial for others. I see you too are concerned about the current delete record/topic limitation. On Tue, Apr 3, 2018 at 5:26 PM, Ted Yu wrot

Re: Kafka Authorizer interface review

2018-04-03 Thread Ted Yu
bq. There is now way to distinguish between topic and record deletion. I guess you meant 'no way' above. I think deleting a topic has higher impact than deleting records. Have you considered filing KIP to distinguish the two operations ? Cheers On Tue, Apr 3, 2018 at 9:22 AM, Mickael Maison wr

Kafka Authorizer interface review

2018-04-03 Thread Mickael Maison
Hi all, Over the past few months the IBM Message Hub team has "played quite a bit" with the pluggable Authorizer interface and I'll try to give a summary of our findings. First when implementing a custom Authorizer, we found it hard having a global view of all the Resource/Operation required for