[jira] [Updated] (KAFKA-18857) Avoid authorization check in the group coordinator

["Mickael Maison (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-18857?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Mickael Maison updated KAFKA-18857:
-----------------------------------
    Fix Version/s: 4.2.0
                       (was: 4.1.0)

> Avoid authorization check in the group coordinator
> --------------------------------------------------
>
>                 Key: KAFKA-18857
>                 URL: https://issues.apache.org/jira/browse/KAFKA-18857
>             Project: Kafka
>          Issue Type: Improvement
>          Components: core
>            Reporter: Dongnuo Lyu
>            Assignee: Dongnuo Lyu
>            Priority: Major
>             Fix For: 4.2.0
>
>
> In kafka-18813, we pass the authorizer to the group coordinator in order to check the topic describe authorization for the subscribed topics resolved from regex.
> Ideally we want to do the authz check only in KafkaApis, so we should consider split the `consumerGroupHeartbeat` to first return a list of topics to check or other ways to avoid the authorization check in the coordinator.
>  
> Original PR comment: [https://github.com/apache/kafka/pull/18989#discussion_r1967762380] 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)