julie
julie copied to clipboard
RBAC - Optimize ACLs should add PREFIXED bindings for schema registry
Is your feature request related to a problem? Please describe.
When optimize acls is set in configure file like this :
topology.acls.optimized=true
Schema registry bindings are are not using this property.
Describe the solution you'd like With optimize ACL and this topology file :
context: "DEV"
source: "test"
projects:
- name: "project"
schemas:
- principal: "Group:CONSUMER_READ"
role: DeveloperRead
JulieOps should create schema registry's bindings like this : DEV.test.project.* / PREFIXED / Group:CONSUMER_READ / DeveloperRead
In fact, in optimize mode it seem consistent that principal would access to all schemas under the prefix. Otherwise it's very boring to declare each schemas in "schemas" section.
Thanks