hulincup opened a new pull request, #23223:
URL: https://github.com/apache/kafka/pull/23223

   ## What changes were proposed in this pull request?
   
   Change the audit log level in StandardAuthorizerData:
   - Log at INFO level when logIfAllowed is set (was DEBUG)
   - Log at WARN level when logIfDenied is set (was INFO)
   
   ## Why are the changes needed?
   
   Audit logs are security-critical and should be visible at default log levels.
   
   Current behavior:
   - ALLOWED operations are logged at DEBUG level - too verbose, requires DEBUG 
logging to see
   - DENIED operations are logged at INFO level - not prominent enough for 
security events
   
   Expected behavior:
   - ALLOWED operations logged at INFO level - visible in default configuration
   - DENIED operations logged at WARN level - stands out as security events
   
   ## Did this PR include tests?
   
   No tests needed - this is a log level change only. The logic remains the 
same.
   
   Fixes: KAFKA-14605


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to