chia_00: For the sake of consistency, if we permit DESCRIBE_CONFIGS to expose 
topic and group names in LIST_CONFIG_RESOURCES, should we also align 
handleTopicMetadataRequest and handleListGroupsRequest? Currently, they 
strictly require DESCRIBE.

On 2026/04/04 16:40:08 Kuan-Po Tseng wrote:
> Hello everyone,
> 
> I would like to start a discussion thread on KIP-1298 which fixes an
> authorization inconsistency in LIST_CONFIG_RESOURCES. Today the RPC
> requires DESCRIBE_CONFIGS on CLUSTER for all resource types, which is
> stricter than comparable RPCs like LIST_GROUPS and METADATA. The practical
> impact is that `kafka-configs.sh --describe --entity-type groups` silently
> returns incomplete results for users holding DESCRIBE but not
> DESCRIBE_CONFIGS on CLUSTER.
> 
> More details, please check
> https://cwiki.apache.org/confluence/x/ZJI8G
> 
> Thanks,
> Kuan-Po Tseng
> 

Reply via email to