tongtaodragon opened a new issue, #5970:
URL: https://github.com/apache/rocketmq/issues/5970

   1. Please describe the issue you observed:
   
   - What did you do (The steps to reproduce)?
   One host which started namesrv and broker
   Enable ACL
   globalWhiteRemoteAddresses only configured this host IP address
   
   People run mqadmin from other server using his AK/SK which is not admin
   mqadmin getAclConfig 
   
   - What is expected to see?
   Only admin with correct AK/SK can get ACL configurations
   
   - What did you see instead?
   non-admin account run mqadmin from other host get all ACL configurations
   
   2. Please tell us about your environment:
   One server which start namesrv and broker, the rocketmq version is 4.9.4
   aclEnable=true
   
   3. Other information (e.g. detailed explanation, logs, related issues, 
suggestions on how to fix, etc):
   ACL information is admin related information which should only allow admin 
query/update.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to