Uploaded image for project: 'Managed Service - Streams'
  1. Managed Service - Streams
  2. MGDSTRM-9582 Authorizer improvements.
  3. MGDSTRM-9801

Present read-only, sythentic, owner ACL rules to users

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Won't Do
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None
    • MK - Sprint 226

      WHAT

      Authorizer improvements described in the Epic.

      HOW

      Make change the #acls and #deleteAcl method so they are aware of the owner rules.  This is done to give the user a complete pictures of the ACLs applied to their instance.

      • Change #acls so that it additionally to the rules from Kafka's database, the list includes  'synthesized' AclBinding objects representing the owner rules from the static configuration.. 
      • Make a complimentary change to #deleteAcl so that attempts to the AclBinding objects belonging to owners are prevented with a clear error message that conveys the special nature of owner rules.
      • A new configuration item will be require so that plugin knows which principals are owners.

      ACLs rules for system principals such as the canary should remain hidden.

              rh-ee-robeyoun Robert Young
              rh-ee-robeyoun Robert Young
              Kafka Integrations
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: