yx9o opened a new pull request, #569: URL: https://github.com/apache/rocketmq-dashboard/pull/569
## What is the purpose of the change Fixes #568 . The ACL user list API returned complete access and secret keys after creation. Masking only the list response would also cause the existing edit and administrator-toggle flows to submit masked values and overwrite the stored credentials. This change makes credential handling consistent across create, list, and update operations. ## Brief changelog - Return complete generated credentials only from the create response. - Mask credentials in list and update responses without mutating stored users. - Preserve stored credentials and creation time when updating ACL user metadata. - Reject updates for users that do not exist. - Stop frontend flows from displaying or submitting credential fields. - Update API documentation and add backend and frontend regression tests. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
