[
https://issues.apache.org/jira/browse/KAFKA-6841?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16490480#comment-16490480
]
ASF GitHub Bot commented on KAFKA-6841:
---------------------------------------
piyushvijay opened a new pull request #5079: [WIP] KAFKA-6841: Add support for
wildcard suffixed ACLs
URL: https://github.com/apache/kafka/pull/5079
This is a WIP and require refactoring for storing Acls at dual location on
ZK.
Because I'm forward-porting it from 1.0.x and code has changed significantly
since then.
I'll post a new version tomorrow but this is for early preview.
Details are in KIP-290:
https://cwiki.apache.org/confluence/display/KAFKA/KIP-290%3A+Support+for+wildcard+suffixed+ACLs
*More detailed description of your change,
if necessary. The PR title and PR message become
the squashed commit message, so use a separate
comment to ping reviewers.*
*Summary of testing strategy (including rationale)
for the feature or bug fix. Unit and/or integration
tests are expected for any behaviour change and
system tests should be considered for larger changes.*
### Committer Checklist (excluded from commit message)
- [ ] Verify design and implementation
- [ ] Verify test coverage and CI build status
- [ ] Verify documentation (including upgrade notes)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
> Add support for wildcard suffixed ACLs
> --------------------------------------
>
> Key: KAFKA-6841
> URL: https://issues.apache.org/jira/browse/KAFKA-6841
> Project: Kafka
> Issue Type: New Feature
> Components: admin, security
> Reporter: Piyush Vijay
> Priority: Major
> Fix For: 2.0.0
>
>
> Kafka supports authorize access to resources like topics, consumer groups
> etc. by way of ACLs. The current supported semantic of resource name and
> principal name in ACL definition is either full resource/principal name or
> special wildcard '**'*, which matches everything.
> Kafka should support a way of defining bulk ACLs instead of specifying
> individual ACLs.
> The details for the feature are available here -
> [https://cwiki.apache.org/confluence/display/KAFKA/KIP-290%3A+Support+for+wildcard+suffixed+ACLs]
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
