conduktor.io ↗

KIP-1006 — Remove SecurityManager Support

Discussion BrokerSecurity

Removes Kafka's compile-time and runtime dependencies on the Java `SecurityManager` API (including `AccessController`) from clients, core, and connect-runtime modules. JEP-411 deprecated `SecurityManager` in Java 17 and Java 23 already throws `UnsupportedOperationException` for legacy APIs when no `SecurityManager` is configured, making these calls a forward-compatibility hazard.

Details

AuthorGreg Harris
StatusDiscussion
JIRAKAFKA-15862
WikiView on Apache Wiki
Created2023-11-20
Last Modified2024-09-26
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.