[GitHub] [pulsar] tuteng commented on pull request #19455: [improve][broker] Require authRole is proxyRole to set originalPrincipal

["tuteng (via GitHub)" <gi...@apache.org>]

tuteng commented on PR #19455:
URL: https://github.com/apache/pulsar/pull/19455#issuecomment-1455674399

   This seems to be a breaking change, I would tend to think it's a security enhancement (it's not a vulnerability), wouldn't it be more appropriate to enable it by default in some future version? Now to avoid the impact on user clusters, can we introduce an option to support disable or enable it. @michaeljmarshall cc/@nodece 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org