kafka-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jason Gustafson (JIRA)" <j...@apache.org>
Subject [jira] [Created] (KAFKA-5259) TransactionalId authorization should imply ProducerId authorization
Date Tue, 16 May 2017 20:54:04 GMT
Jason Gustafson created KAFKA-5259:

             Summary: TransactionalId authorization should imply ProducerId authorization
                 Key: KAFKA-5259
                 URL: https://issues.apache.org/jira/browse/KAFKA-5259
             Project: Kafka
          Issue Type: Sub-task
            Reporter: Jason Gustafson
            Assignee: Jason Gustafson

There is not much point to only authorizing a transactionalId: without producerId authorization,
a principal cannot actually write any transactional data. So we may as well make ProducerId
authorization implicit if a transactionalId is authorized. 

There are also a couple cases that we missed in the initial authorization patch which we may
as well handle here.

1. FindCoordinatorRequest should authorize by transactionalId
2. TxnOffsetCommitRequest should also authorize by transactionalId. Currently this field is
not included in the request type but it probably should be since then writing any transactional
data requires authorization to some transactionalId.

This message was sent by Atlassian JIRA

View raw message