conduktor.io ↗

KIP-755 — Add new AUTO_CREATE ACL for auto topic creation

Discussion Security

Introduces a new `AUTO_CREATE` ACL operation that grants permission specifically for auto-topic creation (triggered by `MetadataRequest`) distinct from the `CREATE` ACL used for explicit `CreateTopicsRequest`. Currently a single `CREATE` ACL covers both auto-creation and explicit creation, preventing administrators from allowing auto-creation (which uses broker defaults) without also granting full topic creation rights.

Protocol Impact

Metadata · CreateTopics

Details

AuthorChristopher L. Shannon
StatusDiscussion
JIRAKAFKA-12916
WikiView on Apache Wiki
Created2021-06-08
Last Modified2021-06-23
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.