[GitHub] [pulsar] PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces

2019-11-25 Thread GitBox
PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces URL: https://github.com/apache/pulsar/issues/5495#issuecomment-558506067 I cheated for my part, I'm injecting the tenant/namespace in the user field of the SASL_PLAIN to find topics. Leaving the issue opened as

[GitHub] [pulsar] PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces

2019-10-31 Thread GitBox
PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces URL: https://github.com/apache/pulsar/issues/5495#issuecomment-548377871 > > True, I was thinking about implementing your first proposal. Something that is looping through znodes, and check if auth_policies.nam

[GitHub] [pulsar] PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces

2019-10-30 Thread GitBox
PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces URL: https://github.com/apache/pulsar/issues/5495#issuecomment-548017823 > That would be requiring to do a scan of the metadata to search for namespaces in which a role has access to. Or maintaining a different

[GitHub] [pulsar] PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces

2019-10-30 Thread GitBox
PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces URL: https://github.com/apache/pulsar/issues/5495#issuecomment-547848019 I digged through the code, roles are stored within ZK as a serialized version of the policies class. Which means that it is [PulsarAutho

[GitHub] [pulsar] PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces

2019-10-29 Thread GitBox
PierreZ commented on issue #5495: Add a reverse mapping from role to namespaces URL: https://github.com/apache/pulsar/issues/5495#issuecomment-547480329 Thanks @jiazhai, where do you think I should put the implementation? I am hesitating between: * PulsarAuthorizationProvider * Na