[KAFKA-5750] Elevate log messages for denials to INFO in SimpleAclAuthorizer class - ASF JIRA

Attach files

Attach Screenshot

Voters

Watch issue

Watchers

Create sub-task

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 1.0.0
Component/s: security
Labels:
None

Description

Currently, the authorizer logs all messages at DEBUG level and logs every single authorization attempt, which can greatly decrease cluster performance, especially when Mirrormaker also produces to that cluster. Many InfoSec requirements, though, require that authorization denials be logged. The proposed solution is to elevate any denial in SimpleAclAuthorizer and any other relevant class to WARN while leaving approvals at their currently logging levels.