Geal commented on issue #5720: authorize tenant level and namespace level 
access from the authorization provider
URL: https://github.com/apache/pulsar/issues/5720#issuecomment-581817669
 
 
   How heavy would it be? From what I see, that would mean:
   - adding the various methods to `AuthorizationProvider`, with the basic 
implementation calling `isSuperUser` under the hood
   - going through the admin API and adapt the levels. I see 12 calls for 
`validateAdminAccessForTenant` and 17 calls for `validateSuperUserAccess` 
(outside of tests). It's largely doable
   I could probably get the same feature throught the manager, but it is very 
surprising to me that a multitenant system could not expose basic management 
features to tenants without admin access

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to