You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "KannarFr (via GitHub)" <gi...@apache.org> on 2025/09/10 09:21:45 UTC

[I] Add right granularity in schemas management [pulsar]

KannarFr opened a new issue, #24723:
URL: https://github.com/apache/pulsar/issues/24723

   ### Search before reporting
   
   - [x] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.
   
   
   ### Motivation
   
   To support custom right management for schemas, we need to introduce check rights for schema operations.
   
   ### Solution
   
   _No response_
   
   ### Alternatives
   
   _No response_
   
   ### Anything else?
   
   _No response_
   
   ### Are you willing to submit a PR?
   
   - [x] I'm willing to submit a PR!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Add right granularity in schemas management [pulsar]

Posted by "merlimat (via GitHub)" <gi...@apache.org>.
merlimat closed issue #24723: Add right granularity in schemas management
URL: https://github.com/apache/pulsar/issues/24723


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] Add right granularity in schemas management [pulsar]

Posted by "merlimat (via GitHub)" <gi...@apache.org>.
merlimat commented on issue #24723:
URL: https://github.com/apache/pulsar/issues/24723#issuecomment-6388681132

   Thanks @KannarFr. Schema endpoints are authorized today with generic topic operations: `GET_METADATA` for reads, `PRODUCE` for uploads and compatibility checks, and tenant admin for deletes (`SchemasResourceBase`). Finer-grained control would mean new schema operations in `TopicOperation` (or a new operation type) that `AuthorizationProvider` implementations have to handle, which changes the authorization plugin API and existing permission semantics, so it needs a PIP: https://github.com/apache/pulsar/blob/master/pip/README.md. You mentioned you're willing to contribute, so a PIP would be very welcome. I'm closing this for now.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org