Github user simonellistonball commented on the issue: https://github.com/apache/metron/pull/895 One option here, that would make me less grumpy would be to incorporate the acl actions with the topic creation actions, which at least prevents nefarious insiders from using this endpoint to give themselves access to arbitrary topics they didn't create.
---