Hi Vahid, I think you make a valid point that the ACLs controlling group operations are not very intuitive.
This is probably a dumb question, but why are we using Read for mutating APIs? Shouldn't that be Write? The distinction between Describe and Read makes a lot of sense for Topics. A group isn't really something that you "read" from in the same way as a topic, so it always felt kind of weird there. best, Colin On Thu, Jun 8, 2017, at 11:29, Vahid S Hashemian wrote: > Hi all, > > I'm resending my earlier note hoping it would spark some conversation > this > time around :) > > Thanks. > --Vahid > > > > > From: "Vahid S Hashemian" <vahidhashem...@us.ibm.com> > To: dev <d...@kafka.apache.org>, "Kafka User" <users@kafka.apache.org> > Date: 05/30/2017 08:33 AM > Subject: KIP-163: Lower the Minimum Required ACL Permission of > OffsetFetch > > > > Hi, > > I started a new KIP to improve the minimum required ACL permissions of > some of the APIs: > https://cwiki.apache.org/confluence/display/KAFKA/KIP-163%3A+Lower+the+Minimum+Required+ACL+Permission+of+OffsetFetch > > The KIP is to address KAFKA-4585. > > Feedback and suggestions are welcome! > > Thanks. > --Vahid > > > > >