You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kafka.apache.org by "Lan Ding (Jira)" <ji...@apache.org> on 2025/03/13 07:23:00 UTC

[jira] [Resolved] (KAFKA-18817) ShareGroupHeartbeat and ShareGroupDescribe API must check topic describe

     [ https://issues.apache.org/jira/browse/KAFKA-18817?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Lan Ding resolved KAFKA-18817.
------------------------------
    Resolution: Fixed

> ShareGroupHeartbeat and ShareGroupDescribe API must check topic describe
> ------------------------------------------------------------------------
>
>                 Key: KAFKA-18817
>                 URL: https://issues.apache.org/jira/browse/KAFKA-18817
>             Project: Kafka
>          Issue Type: Sub-task
>            Reporter: Andrew Schofield
>            Assignee: Lan Ding
>            Priority: Major
>             Fix For: 4.1.0
>
>
> ShareGroupHeartbeat and ShareGroupDescribe RPCs must check topic describe authorisation to ensure we don't leak information to clients without the required permission. This is the share group equivalent of https://issues.apache.org/jira/browse/KAFKA-18813.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)