...
The other, and perhaps more compelling, incentive for this change is that the current ACL settings breaks a certain functionality (and this functionality seems to have been broken for a while). As mentioned in the above table the minimum required permission for DescribeGroup
and OffsetFetch
is Describe and Read, respectively. But implementation of the describe group command makes use of OffsetFetch
API (version 0 and 1 pre-KIP-88, and version 2 post-KIP-88). Therefore, a user who is granted the current minimum requirement permissions permission Describe for DescribeGroup
still would not be able to run the describe group command and get the expected result. They would see something like this in the output:
...