You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jira@kafka.apache.org by "huxihx (Jira)" <ji...@apache.org> on 2019/08/30 02:13:00 UTC
[jira] [Commented] (KAFKA-8719) kafka-console-consumer bypassing
sentry evaluations while specifying --partition option
[ https://issues.apache.org/jira/browse/KAFKA-8719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16919120#comment-16919120 ]
huxihx commented on KAFKA-8719:
-------------------------------
The issue was already fixed in newer versions where ReassignPartitionsCommand checks existence for to-be-reassigned brokers before the execution.
> kafka-console-consumer bypassing sentry evaluations while specifying --partition option
> ---------------------------------------------------------------------------------------
>
> Key: KAFKA-8719
> URL: https://issues.apache.org/jira/browse/KAFKA-8719
> Project: Kafka
> Issue Type: Bug
> Components: consumer, tools
> Reporter: Sathish
> Priority: Major
> Labels: kafka-console-cons
>
> While specifying --partition option on kafka-console-consumer, it is bypassing the sentry evaluations and making the users to consume messages freely. Even though a consumer group does not have access to consume messages from topics --partition option bypassing the evaluation
> Example command used:
> #kafka-console-consumer --topic booktopic1 --consumer.config consumer.properties --bootstrap-server <broker-host>:9092 --from-beginning --consumer-property group.id=spark-kafka-111 --partition 0
> This succeeds even though, if spark-kafka-111 does not have any access on topic booktopic1
> whereasÂ
> #kafka-console-consumer --topic booktopic1 --consumer.config consumer.properties --bootstrap-server <broker-host>:9092 --from-beginning --consumer-property group.id=spark-kafka-111
> Fails with topic authorisation issues
--
This message was sent by Atlassian Jira
(v8.3.2#803003)