rdhabalia commented on issue #2981: Allow subscribers to access subscription 
admin-api
URL: https://github.com/apache/pulsar/pull/2981#issuecomment-438464961
 
 
   > Isn't it possible to give permissions to these subscriptions individually
   
   Umm.. #899 doesn't store authorized subscriber role-names. it authorizes 
request based on the sub-name (eg. `myRoleName-mysub`). so, if sub-auth mode is 
enabled then sub-name has to start with `myRoleName` so, user with `myRoleName` 
role is authorized for `mysub`. 
   But existing subscription `mysub` can't be accessed by `myRoleName` because 
it doesn't start with role-name. 
   So, I am not sure how can we use this solution in a straight forward way to 
address above issue. Can you please let me know if I am missing anything here.
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to