[KAFKA-7069] AclCommand does not allow 'create' operation on 'topic'

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 2.0.0
• Component/s: core, security
• Assignee: Andy Coates
• Reporter: Andy Coates
• Created: 18/Jun/18 09:01
• Updated: 18/Jun/18 09:05
• Resolved: 18/Jun/18 09:04

Description

KAFKA-6726 saw KIP-277 implemented, which extended the set of operations allowed on the 'topic' resource type to include 'create'.

The AclCommands CLI class currently rejects this new operation. e.g. running:

bin/kafka-acls --authorizer-properties zookeeper.connect=localhost:2181 --add --allow-principal User:KSQL --operation create --topic t1

Fails with error:

ResourceType Topic only supports operations Read,All,AlterConfigs,DescribeConfigs,Delete,Write,Describe