zergduan opened a new issue, #9349:
URL: https://github.com/apache/rocketmq/issues/9349

   ### Before Creating the Bug Report
   
   - [x] I found a bug, not just asking a question, which should be created in 
[GitHub Discussions](https://github.com/apache/rocketmq/discussions).
   
   - [x] I have searched the [GitHub 
Issues](https://github.com/apache/rocketmq/issues) and [GitHub 
Discussions](https://github.com/apache/rocketmq/discussions)  of this 
repository and believe that this is not a duplicate.
   
   - [x] I have confirmed that this bug belongs to the current repository, not 
other repositories of RocketMQ.
   
   
   ### Runtime platform environment
   
   Oracle Linux 9
   
   ### RocketMQ version
   
   release 5.3.2
   
   ### JDK Version
   
   JDK 21
   
   ### Describe the Bug
   
   ACL 2.0 中用户默认权限缺少MessageTrace默认Topic RMQ_SYS_TRACE_TOPIC的 PUB权限。在 ACL 1.0 中 
从4.9.4开始新创建的用户默认拥有RMQ_SYS_TRACE_TOPIC的 PUB权限,以便用于记录消息追踪信息;但是目前ACL 
2.0中新建用户默认没有此权限,需要手动创建相关ACL才能使用消息追踪功能;
   即需要执行下面命令,才可以使用默认Topic记录消息追踪信息:
   sh mqadmin createAcl -n 'xxx:xxx' -c XXX \
   --subject User:XXX --resources Topic:RMQ_SYS_TRACE_TOPIC \
   --actions PUB --decision Allow;\
   建议对新建用户默认授权相关系统Topic权限。
   
   
   
   ### Steps to Reproduce
   
   N/A
   
   ### What Did You Expect to See?
   
   新建用户应默认拥有SYTEM Topic的授权,不应需要手动创建System Topic相关的ACL授权
   
   ### What Did You See Instead?
   
   A
   
   
   ### Additional Context
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to