You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@kafka.apache.org by "Manikumar (JIRA)" <ji...@apache.org> on 2017/08/19 06:57:01 UTC

[jira] [Assigned] (KAFKA-5750) Elevate log messages for denials to WARN in SimpleAclAuthorizer class

     [ https://issues.apache.org/jira/browse/KAFKA-5750?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Manikumar reassigned KAFKA-5750:
--------------------------------

    Assignee: Manikumar

> Elevate log messages for denials to WARN in SimpleAclAuthorizer class
> ---------------------------------------------------------------------
>
>                 Key: KAFKA-5750
>                 URL: https://issues.apache.org/jira/browse/KAFKA-5750
>             Project: Kafka
>          Issue Type: Improvement
>          Components: security
>            Reporter: Phillip Walker
>            Assignee: Manikumar
>             Fix For: 1.0.0
>
>
> Currently, the authorizer logs all messages at DEBUG level and logs every single authorization attempt, which can greatly decrease cluster performance, especially when Mirrormaker also produces to that cluster. Many InfoSec requirements, though, require that authorization denials be logged. The proposed solution is to elevate any denial in SimpleAclAuthorizer and any other relevant class to WARN while leaving approvals at their currently logging levels.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)