Skip to main content

acl_operation_match

krabka_verified::authz

Function acl_operation_match 

Source 
pub fn acl_operation_match(
    stored: AclOperationKind,
    requested: AclOperationKind,
    is_allow: bool,
) -> bool
Expand description

Match exact operations, All, and Kafka’s one-way implication arrows.

The implication arrows (Read/Write/Delete/Alter → Describe, and AlterConfigs → DescribeConfigs) apply only when the stored ACL is an ALLOW entry: Kafka’s operation-implication table never widens what a DENY ACL blocks.