apache / apache/pulsar

Admin/Permissions: getPartitionedTopicListshould work even with Topic Level Permissions

Open
#11,945 3 comments 0 reactions 1 assignee Claimed by @eolivelli View on GitHub
lifecycle/stale type/enhancement
Dominant language
Java
Stars
15.3k
Forks
3.8k
Avg merge
1d 14h
Merged PRs (30d)
160

Description

Currently (Pulsar 2.8.x) in order to use admin().topics().getPartitionedTopicListAsync(topicName) you have to have "Tenant admin" role.

**Describe the solution you'd like**
It should be enough to require topic level permissions and allow users that are allowed to produce/consumer on the topic to use that API.

**Describe alternatives you've considered**
I don't see any alternative

**Additional context**
I am working on a Pulsar Proxy for KOP and currently in KOP we require only Topic Level permissions, but if I use PulsarAdmin I am not able to get the partitions for a topic using a regular user that has only these permissions:
```
admin.topics().grantPermission(fullNewTopicName,
ANOTHER_USER,
Sets.newHashSet(AuthAction.consume, AuthAction.produce));
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.