You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2020/03/12 18:36:24 UTC

[GitHub] [pulsar] devinbost opened a new issue #6530: Restrict permission to create new subscription for given role - force role to use existing subscription

devinbost opened a new issue #6530: Restrict permission to create new subscription for given role - force role to use existing subscription
URL: https://github.com/apache/pulsar/issues/6530
 
 
   We need a way to restrict a role to only be able to use a subscription that has been assigned (i.e. created with a different role.) This feature would be helpful for our CI/CD automation for when we provision a new tenant/namespace for a team. We need to ensure that we know who is using the subscription that we create, so we need to force users on the team to only be able to use the subscription that we have created for them.
   
   The code change would be to allow a role to be restricted from creating new subscriptions. (It also needs to support token auth.)
   
   I'd like some guidance on what classes will need to be modified since I might be able to help with making this code change (if there are no objections to it.)

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

[GitHub] [pulsar] jiazhai commented on issue #6530: Restrict permission to create new subscription for given role - force role to use existing subscription

Posted by GitBox <gi...@apache.org>.
jiazhai commented on issue #6530: Restrict permission to create new subscription for given role - force role to use existing subscription
URL: https://github.com/apache/pulsar/issues/6530#issuecomment-600969320
 
 
   There is some permission related discussions in #5720 (related PR #6428), @KannarFr and @zymap are working on it.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services