conduktor.io ↗

KIP-504 — Add new Java Authorizer Interface

Accepted Kafka 2.4 Security

Replaces the deprecated Scala kafka.security.auth.Authorizer trait with a new Java interface org.apache.kafka.server.authorizer.Authorizer, adding support for async authorization, broker start interceptors, and ACL metadata. The existing Scala trait cannot be depended on without pulling in kafka-core, creates compatibility barriers for third-party authorizer implementations (Ranger, Sentry), and lacks async support needed for remote authorization services.

Details

AuthorRajini Sivaram
StatusAccepted
Kafka Version2.4
JIRAKAFKA-8865
WikiView on Apache Wiki
Created2019-08-06
Last Modified2019-09-24
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.