KIP-504 — Add new Java Authorizer Interface
Accepted Kafka 2.4 Security
Replaces the deprecated Scala kafka.security.auth.Authorizer trait with a new Java interface org.apache.kafka.server.authorizer.Authorizer, adding support for async authorization, broker start interceptors, and ACL metadata. The existing Scala trait cannot be depended on without pulling in kafka-core, creates compatibility barriers for third-party authorizer implementations (Ranger, Sentry), and lacks async support needed for remote authorization services.
Details
| Author | Rajini Sivaram |
| Status | Accepted |
| Kafka Version | 2.4 |
| JIRA | KAFKA-8865 |
| Wiki | View on Apache Wiki |
| Created | 2019-08-06 |
| Last Modified | 2019-09-24 |
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.