Managing Access Control

Allow User:alice Read on Topic:orders from host *

authorizer.class.name=org.apache.kafka.metadata.authorizer.StandardAuthorizer
allow.everyone.if.no.acl.found=false

kafka-acls.sh --bootstrap-server localhost:9092 --add \
  --allow-principal User:producer --operation Write --topic orders

kafka-acls.sh --bootstrap-server localhost:9092 --list --topic orders

kafka-acls.sh --bootstrap-server localhost:9092 --remove \
  --allow-principal User:producer --operation Write --topic orders --force

ssl.principal.mapping.rules=RULE:^CN=([^,]+).*$/$1/,DEFAULT

super.users=User:admin;User:kafka-broker

kafka-acls.sh --bootstrap-server localhost:9092 --add \
  --allow-principal User:c --operation Read --group order-svc

kafka-acls.sh --bootstrap-server localhost:9092 --add \
  --allow-principal User:team-a --operation Write \
  --topic orders. --resource-pattern-type PREFIXED

kafka-acls.sh --bootstrap-server localhost:9092 --add \
  --allow-principal User:monitor --operation Read --topic '*'

admin.createAcls(List.of(new AclBinding(
  new ResourcePattern(ResourceType.TOPIC, "orders", PatternType.LITERAL),
  new AccessControlEntry("User:alice", "*", AclOperation.READ,
    AclPermissionType.ALLOW)))).all().get();