...
API | Minimum Required Permission |
---|---|
ListGroups | Describe (Cluster) or Describe (Group) |
Proposed Changes
The change proposed by this KIP is simple. An alternative ACL will be added as the minimum required permission of the ListGroups API: Describe (Cluster) would still work as before. However, a Describe (Group) ACL is added which gives users the ability to list groups they have this ACL on. The minimum required permissions are hard-coded in kafka.server.KafkaApis.scala
inside each API handler method. For example, the part that enforces the minimum required permission for the ListGroups
API currently looks like this:
...