You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@kafka.apache.org by Wilko Zonnenberg <w....@first8.nl> on 2017/12/14 14:03:30 UTC

Authorization in Kafka

Hi All,

I was wondering, is it possible to have one topic with data from different
customers. And making sure a consumer can only read the messages of a
certain customer. i.e.:

Three messages:
    "message1 for customer1"
    "message2 for customer2"
    "message3 for customer1"

Authorized as customer1, a consumer should only be able to consume message
1 and 2. Is this possible?

- Wilko

Re: Authorization in Kafka

Posted by Wilko Zonnenberg <w....@first8.nl>.

Hi Subhash,

Thanks for your answer, that was indeed what I read from the documentation
as well. I was hoping for some kind of solution as you are mentioning, but
cannot find any.

Think I should assume it is not possible.

Wilko

2017-12-14 15:31 GMT+01:00 Subhash Sriram <su...@gmail.com>:

> Hi,
>
> I am not an expert, but from looking at the ACL documentation, you can't
> control read authorization at the partition level, only at the topic level.
> If it is possible to control access at the partition level, maybe you could
> have a dedicated partition for each customerID?
>
> Thanks,
> Subhash
>
> Sent from my iPhone
>
> > On Dec 14, 2017, at 9:03 AM, Wilko Zonnenberg <w....@first8.nl>
> wrote:
> >
> > Hi All,
> >
> > I was wondering, is it possible to have one topic with data from
> different
> > customers. And making sure a consumer can only read the messages of a
> > certain customer. i.e.:
> >
> > Three messages:
> >    "message1 for customer1"
> >    "message2 for customer2"
> >    "message3 for customer1"
> >
> > Authorized as customer1, a consumer should only be able to consume
> message
> > 1 and 2. Is this possible?
> >
> > - Wilko
>

Re: Authorization in Kafka

Posted by Subhash Sriram <su...@gmail.com>.

Hi,

I am not an expert, but from looking at the ACL documentation, you can't control read authorization at the partition level, only at the topic level. If it is possible to control access at the partition level, maybe you could have a dedicated partition for each customerID?

Thanks,
Subhash

Sent from my iPhone

> On Dec 14, 2017, at 9:03 AM, Wilko Zonnenberg <w....@first8.nl> wrote:
> 
> Hi All,
> 
> I was wondering, is it possible to have one topic with data from different
> customers. And making sure a consumer can only read the messages of a
> certain customer. i.e.:
> 
> Three messages:
>    "message1 for customer1"
>    "message2 for customer2"
>    "message3 for customer1"
> 
> Authorized as customer1, a consumer should only be able to consume message
> 1 and 2. Is this possible?
> 
> - Wilko