Kafka ACLs (Access Control Lists) perform authorization checks every time a client attempts to access a resource (e.g., topic, consumer group). This ensures continuous enforcement of permissions, not just at connection time or intervals. This approach provides fine-grained security, preventing unauthorized actions at any time during a session.