Struct SimpleAclAuthorizer 

pub struct SimpleAclAuthorizer { /* private fields */ }

Authorizer that consults the cluster’s persisted ACLs.

The caller supplies the AclSource per call: a MetadataImage for the broker, an AclCache for the gateway.

This type holds the configured super-user set. Principals in this set bypass ACL evaluation and always get Allow.

Implementations

impl SimpleAclAuthorizer

pub fn new(super_users: HashSet<String>) -> Self

pub fn with_allow_everyone_if_no_acl_found(self, allow: bool) -> Self

Sets Kafka’s allow.everyone.if.no.acl.found (default false). See the module doc for the exact semantics.

Trait Implementations

impl Authorizer for SimpleAclAuthorizer

fn authorize_by_resource_type( &self, source: &dyn AclSource, principal: &Principal, host: &SocketAddr, resource_type: ResourceType, operation: AclOperation, ) -> AuthorizationResult

Allows first when the ordinary Self::authorize decision allows the hard-coded name hardcode, as Kafka’s default implementation does. Otherwise it scans every stored entry of resource_type for an ALLOW ACL, matching principal, host, and operation, that no DENY covers.

A literal ALLOW needs its exact name to survive the matching DENYs. Kafka checks a prefix ALLOW only against dominating DENY prefixes and the DENY wildcard; literal exclusions cannot dominate a prefix grant. A wildcard ALLOW survives unless a wildcard DENY exists. These pattern checks need no synthetic name that another ACL could happen to deny.

fn authorize( &self, source: &dyn AclSource, req: &AuthorizationRequest<'_>, ) -> AuthorizationResult

Decide whether req.principal may do req.operation on (req.resource_type, req.resource_name) from req.host.

fn authorize_quiet( &self, source: &dyn AclSource, req: &AuthorizationRequest<'_>, ) -> AuthorizationResult

The decision of Authorizer::authorize for a check that Kafka makes with logIfDenied = false: a probe whose Deny is not a refusal, such as the cluster-wide Create shortcut of CreateTopics that falls back to a per-topic check, or the operations bit field a Describe reports.

fn is_configured(&self) -> bool

Whether this implementation is a real authorization decision point, the way Kafka’s authorizer.class.name names one.

fn decision_ttl(&self) -> Option<Duration>

Upper bound on how long a caller-side cache may reuse a decision from this authorizer without asking again, or None if a decision is exactly as fresh as whatever source snapshot it was computed against – true of the ACL-backed implementations, whose grants live in the metadata log a caller can already key a cache on.

impl Debug for SimpleAclAuthorizer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.