KIP-1006 — Remove SecurityManager Support
Discussion BrokerSecurity
Removes Kafka's compile-time and runtime dependencies on the Java `SecurityManager` API (including `AccessController`) from clients, core, and connect-runtime modules. JEP-411 deprecated `SecurityManager` in Java 17 and Java 23 already throws `UnsupportedOperationException` for legacy APIs when no `SecurityManager` is configured, making these calls a forward-compatibility hazard.
Details
| Author | Greg Harris |
| Status | Discussion |
| JIRA | KAFKA-15862 |
| Wiki | View on Apache Wiki |
| Created | 2023-11-20 |
| Last Modified | 2024-09-26 |
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.