Hello everyone,

I would like to start a discussion thread on KIP-1298 which fixes an
authorization inconsistency in LIST_CONFIG_RESOURCES. Today the RPC
requires DESCRIBE_CONFIGS on CLUSTER for all resource types, which is
stricter than comparable RPCs like LIST_GROUPS and METADATA. The practical
impact is that `kafka-configs.sh --describe --entity-type groups` silently
returns incomplete results for users holding DESCRIBE but not
DESCRIBE_CONFIGS on CLUSTER.

More details, please check
https://cwiki.apache.org/confluence/x/ZJI8G

Thanks,
Kuan-Po Tseng

Reply via email to