You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Andrew Schofield (Jira)" <ji...@apache.org> on 2025/02/21 09:23:00 UTC

[jira] [Assigned] (KAFKA-18817) ShareGroupHeartbeat and ShareGroupDescribe API must check topic describe

     [ https://issues.apache.org/jira/browse/KAFKA-18817?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrew Schofield reassigned KAFKA-18817:
----------------------------------------

    Assignee: Shivsundar R  (was: Andrew Schofield)

> ShareGroupHeartbeat and ShareGroupDescribe API must check topic describe
> ------------------------------------------------------------------------
>
>                 Key: KAFKA-18817
>                 URL: https://issues.apache.org/jira/browse/KAFKA-18817
>             Project: Kafka
>          Issue Type: Sub-task
>            Reporter: Andrew Schofield
>            Assignee: Shivsundar R
>            Priority: Major
>             Fix For: 4.1.0
>
>
> ShareGroupHeartbeat and ShareGroupDescribe RPCs must check topic describe authorisation to ensure we don't leak information to clients without the required permission. This is the share group equivalent of https://issues.apache.org/jira/browse/KAFKA-18813.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)