congbobo184 commented on code in PR #22744:
URL: https://github.com/apache/pulsar/pull/22744#discussion_r1680348086
##########
pulsar-broker-common/src/main/java/org/apache/pulsar/broker/authorization/PulsarAuthorizationProvider.java:
##########
@@ -155,6 +156,9 @@ public CompletableFuture<Boolean> canConsumeAsync(TopicName
topicName, String ro
@Override
public CompletableFuture<Boolean> canLookupAsync(TopicName topicName,
String role,
AuthenticationDataSource authenticationData) {
+ if (SystemTopicNames.isTransactionCoordinatorAssign(topicName)) {
Review Comment:
how do we control user can use transaction?
It seem like a good way to control user to use transaction, if user have the
produce role of TC system topic, then can send transaction message and can do
lookup for tc topic. this only a idea. WDYT? @thetumbled @TakaHiR07
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
