gharris1727 commented on code in PR #14995:
URL: https://github.com/apache/kafka/pull/14995#discussion_r1453850678


##########
clients/src/main/java/org/apache/kafka/common/config/provider/FileConfigProvider.java:
##########
@@ -40,7 +42,13 @@ public class FileConfigProvider implements ConfigProvider {
 
     private static final Logger log = 
LoggerFactory.getLogger(FileConfigProvider.class);
 
+    public static final String ALLOWED_PATHS_CONFIG = "allowed.paths";
+    public static final String ALLOWED_PATHS_DOC = "A comma separated list of 
paths that this config provider is " +
+            "allowed to access. If not set, all paths are allowed.";
+    private AllowedPaths allowedPaths = null;

Review Comment:
   > Could there be users who don't call configure first necessarily? I'm 
worried that throwing IllegalStateException could cause backward compatibility 
issue.
   
   Throwing IllegalStateException would be a backwards incompatible change, but 
I think it's not one that was supported in the first place. Not calling 
configure() on these particular implementations because they previously 
happened to be no-ops is coupling too closely on the internal implementation of 
these classes.
   
   It is a value judgement, and we have to determine which is more valuable. 
For the record, I think that exploiting the interface by preventing calls to 
configure() is unlikely, I was just thinking about defense in depth.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscr...@kafka.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to