Page History

...

The "operation" is the particular operation which the ACL controls.  In the wire protocol, we represented resource_type as an INT8.  The mappings are:

• -20: unknown

• -1: any

• 2: all

• 30: read

• 14: write

• 25: create

• 6: delete

• 37: alter

• 48: describe

• 59: clusterAction

• 6: all

"Unknown" represents an operation type that we don't know how to decode.  "Any" can only be used in filters, and matches any operation type.

The "permission_type" is whether the ACL allows access or forbids it.  In the wire protocol, we represented resource_type as an INT8.  The mappings are:

• -20: unknown

• -1: any

• 02: deny

• 13: allow

"Unknown" represents a permission type that we don't know how to decode.  "Any" can only be used in filters, and matches any permission type.

...

The "resource_type" is the type of resource the ACL applies to.  In the wire protocol, we represented resource_type as an INT8.  The mappings are:

• -20: unknown

• -1: any

• 02: topic

• 13: group

• 24: cluster

"Unknown" represents a resource type that we don't know how to decode.  "Any" can only be used in filters, and matches any resource type.

...