You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Lianet Magrans (Jira)" <ji...@apache.org> on 2025/02/25 14:35:00 UTC

[jira] [Assigned] (KAFKA-18857) Avoid authorization check in the group coordinator

     [ https://issues.apache.org/jira/browse/KAFKA-18857?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lianet Magrans reassigned KAFKA-18857:
--------------------------------------

    Assignee: Lianet Magrans

> Avoid authorization check in the group coordinator
> --------------------------------------------------
>
>                 Key: KAFKA-18857
>                 URL: https://issues.apache.org/jira/browse/KAFKA-18857
>             Project: Kafka
>          Issue Type: Improvement
>          Components: core
>            Reporter: Dongnuo Lyu
>            Assignee: Lianet Magrans
>            Priority: Major
>             Fix For: 4.1.0
>
>
> In kafka-18813, we pass the authorizer to the group coordinator in order to check the topic describe authorization for the subscribed topics resolved from regex.
> Ideally we want to do the authz check only in KafkaApis, so we should consider split the `consumerGroupHeartbeat` to first return a list of topics to check or other ways to avoid the authorization check in the coordinator.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)