Remove acl list operation to preview ACLs to be deleted

[rkpattnaik780]

Description

Version: 0.34.2

kafka acl delete makes an acl list query to get a preview of the ACL rules to be deleted. This causes an issue whenever the specific rule is defined for all accounts as well.

Orginally discussed here

Steps to reproduce

1. Create same ACLs for user "abc" and all accounts using UI.
2. Deleting the ACL for user "abc" via kafka acl delete command will remove both the rules(for user abc and all accounts)

Expected

acl delete should delete the rule for specified user leaving the rule for all accounts as it is.

[craicoverflow]

Yes, good catch. The preview is really valuable though as it would let the user know exactly the ACLs they are about to delete.

$ curl -L -X GET 'https://admin-server-enda-dev-c-o-sckmf-c--rn-beqa.bf2.kafka.rhcloud.com/rest/acls?operation=ALL&patternType=PREFIXED&permission=ALLOW&principal=User:wtrocki_devexp&resourceName=rhoas&resourceType=TOPIC' -H "Authorization: Bearer $(cat ~/.config/rhoas/config.json | jq -r '.mas_access_token' | xargs echo -n)"
{
  "items" : [ {
    "resourceType" : "TOPIC",
    "resourceName" : "rhoas",
    "patternType" : "PREFIXED",
    "principal" : "User:wtrocki_devexp",
    "operation" : "ALL",
    "permission" : "ALLOW"
  }, {
    "resourceType" : "TOPIC",
    "resourceName" : "rhoas",
    "patternType" : "PREFIXED",
    "principal" : "User:*",
    "operation" : "ALL",
    "permission" : "ALLOW"
  } ],
  "size" : 10,
  "page" : 1,
  "total" : 2
}

This is valid data being returned from the API.

I wonder if we could filter out these duplicates from the CLI?

Alternatively, it could be good to have an additional query parameter that, when set returns only the exact items returned. So If I pass ?principal=User:enda&exact=true then it would not not return the ACL where the principal = "*". This would be useful for this scenario. I'd like us to investigate thr first option first though.

[rkpattnaik780]

exact param will be great, let us find out if iy is feasible. We can stick to filtering for the time being.

[craicoverflow]

Just so we are clear: are you investigating this?

[rkpattnaik780]

Just so we are clear: are you investigating this?

Not yet, you can take it up you want to.

[craicoverflow]

No, I'm not necessarily looking to, I just wanted to avoid any assumptions. Could you assign this to yourself if you plan on checking it out? I think it's important to do soon.