Is there a ticket to extend wildcard topic ACL support to include the use case Derar originally mentioned? And/or are there plans to?
On Mon, Sep 5, 2016 at 3:43 PM, Ismael Juma <ism...@juma.me.uk> wrote: > Hi Derar, > > The support for wildcards is limited to `*` at this point. Sorry for the > confusion. If you're interested to submit a PR to clarify the > documentation, that would be great. :) > > Ismael > > On Mon, Sep 5, 2016 at 7:38 PM, Derar Alassi <derar.ala...@gmail.com> > wrote: > > > Hi all, > > > > Although the documentation mentions that one can use wildcards with topic > > ACLs, I couldn't get that to work. Essentially, I want to set an Allow > > Read/Write ACL on topics com.domain.xyz.* to a certain user. This would > > give this user Read/Write access to topics com.domain.xyz.abc and > > com.domain.xyz.def . > > > > I set an ACL using this command: > > ./kafka-acls.sh --authorizer-properties zookeeper.connect=<connection- > str> > > --add --allow-principal User:"user01" --topic com.domain.xyz.* --group > > group01 --operation read > > > > When I try to consume from the topic com.domain.xyz.abc using the same > > user ID and group, I get NOT_AUTHORIZED error. > > > > Anything I am missing? > > > > Thanks, > > Derar > > > -- *Samuel Taylor* Data Science *Square Root, Inc. <http://square-root.com/>* <http://square-root.com/>Square-Root.com <http://square-root.com/>
