rdhabalia commented on issue #2981: Allow subscribers to access subscription 
admin-api
URL: https://github.com/apache/pulsar/pull/2981#issuecomment-438904081
 
 
   > If we grant * on consume role, can any consumer subscribe regardless of 
per-subscription role?
   
   right now, it's not supporting wild-card char such as `*` but 
   - consumer can subscribe to any subscription if consumer's principal/role is 
authorized at namespace-level (`consume`) or per-topic (`consume`).
   - however, if per-subscription auth is configured for a specific 
subscription-name then consumer's `principal/role` has to be authorized role as 
per `per-subscription` to connect to that specific subscription. so, in 
`pre-fix sub` usecase, user can grant access to set of roles for a specific 
subscription and only those roles can access the subscription. so, we can avoid 
sub-name conflict.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to