Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-5750

Elevate log messages for denials to INFO in SimpleAclAuthorizer class

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.0.0
    • Component/s: security
    • Labels:
      None

      Description

      Currently, the authorizer logs all messages at DEBUG level and logs every single authorization attempt, which can greatly decrease cluster performance, especially when Mirrormaker also produces to that cluster. Many InfoSec requirements, though, require that authorization denials be logged. The proposed solution is to elevate any denial in SimpleAclAuthorizer and any other relevant class to WARN while leaving approvals at their currently logging levels.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                omkreddy Manikumar
                Reporter:
                pwalker Phillip Walker
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: