Re: Restrict who can change ACLs

2016-10-04 Thread Gerard Klijs
You could limit the access to zookeeper, with kerberos, or with a firewall. For example to only allow connections to zookeeper from the cluster itself, this way you need to access those machines to be able to set acls. The create permission is used for creating topics I think, there is no acl to li

Restrict who can change ACLs

2016-10-04 Thread Shrikant Patel
Hi All, How can I restrict who can modify ACLs for kafka cluster? Anyone can use kafka-acls cli to modify the acl. I added superuser and thought that when we are running the kafka-acls, it validates that only spatel user can run this command. So what prevents user on n\w trying to modify ACLs.