You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@kafka.apache.org by "Ismael Juma (JIRA)" <ji...@apache.org> on 2015/11/18 18:47:11 UTC

[jira] [Created] (KAFKA-2858) Clarify usage of `Principal` at the authentication layer

Ismael Juma created KAFKA-2858:
----------------------------------

             Summary: Clarify usage of `Principal` at the authentication layer
                 Key: KAFKA-2858
                 URL: https://issues.apache.org/jira/browse/KAFKA-2858
             Project: Kafka
          Issue Type: Improvement
          Components: security
            Reporter: Ismael Juma
            Assignee: Ismael Juma
            Priority: Minor


We currently use `KafkaPrincipal` at the authentication and authorization layer. But there is an implicit assumption that we always use a `KafkaPrincipal` with principalType == USER_TYPE as we ignore the the principalType of the `KafkaPrincipal` when we create `RequestChannel.Session`.

I think it would be clearer if we used a separate `Principal` implementation in the authentication layer.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)