pulsar-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From GitBox <...@apache.org>
Subject [GitHub] jai1 commented on issue #1002: Making Pulsar Proxy more secure
Date Thu, 01 Jan 1970 00:00:00 GMT
jai1 commented on issue #1002: Making Pulsar Proxy more secure
URL: https://github.com/apache/incubator-pulsar/pull/1002#issuecomment-353492995
 
 
   > I don't think "proxy" it's a good match for an action. An action in the ACLs is associated
with a "role" while for proxy is just a flag
   
   Should we rename the action to _lookup_ and add another or condition to  
   https://github.com/apache/incubator-pulsar/blob/master/pulsar-broker-common/src/main/java/org/apache/pulsar/broker/authorization/AuthorizationManager.java?utf8=%E2%9C%93#L109

   
   
   OR
   
   Not add any Action and enforce that proxy has same AuthAcion permission as the client (produce
and consume) - finer control

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

Mime
View raw message