[jira] [Updated] (KAFKA-6994) KafkaConsumer.poll throwing AuthorizationException timeout-dependent

["Ray Chiang (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-6994?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ray Chiang updated KAFKA-6994:
------------------------------
    Component/s: consumer

> KafkaConsumer.poll throwing AuthorizationException timeout-dependent
> --------------------------------------------------------------------
>
>                 Key: KAFKA-6994
>                 URL: https://issues.apache.org/jira/browse/KAFKA-6994
>             Project: Kafka
>          Issue Type: Bug
>          Components: consumer
>            Reporter: Edoardo Comar
>            Priority: Minor
>
> With auto-topic creation enabled, when attempting to consume from a non-existent topic, the {{AuthorizationException}} may or may not be thrown from {{poll(timeout)}} depending on the {{timeout}} value.
> The issue can be recreated modifying a test in {{AuthorizerIntegrationTest}} as below (see comment) to *not* add the needed acl and therefore expecting the test to fail.
>  While the first {{poll}} call will always throw with a short timeout, the second {{poll}} will not throw with the short timeout.
> {code:java}
>   @Test
>   def testCreatePermissionOnClusterToReadFromNonExistentTopic() {
>     testCreatePermissionNeededToReadFromNonExistentTopic("newTopic",
>       Set(new Acl(userPrincipal, Allow, Acl.WildCardHost, Create)), 
>       Cluster)
>   }
>   private def testCreatePermissionNeededToReadFromNonExistentTopic(newTopic: String, acls: Set[Acl], resType: ResourceType) {
>     val topicPartition = new TopicPartition(newTopic, 0)
>     val newTopicResource = new Resource(Topic, newTopic)
>     addAndVerifyAcls(Set(new Acl(userPrincipal, Allow, Acl.WildCardHost, Read)), newTopicResource)
>     addAndVerifyAcls(groupReadAcl(groupResource), groupResource)
>     this.consumers.head.assign(List(topicPartition).asJava)
>     try {
>       this.consumers.head.poll(Duration.ofMillis(50L));
>       Assert.fail("should have thrown Authorization Exception")
>     } catch {
>       case e: TopicAuthorizationException =>
>         assertEquals(Collections.singleton(newTopic), e.unauthorizedTopics())
>     }
>     //val resource = if (resType == Topic) newTopicResource else Resource.ClusterResource
>     // addAndVerifyAcls(acls, resource)
>     // need to use a larger timeout in this subsequent poll else it may not cause topic auto-creation
>     // this can be verified by commenting the above addAndVerifyAcls line and expecting this test to fail
>     this.consumers.head.poll(Duration.ofMillis(50L));
>   }
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)