Aias00 commented on issue #1312:
URL: 
https://github.com/apache/rocketmq-dashboard/issues/1312#issuecomment-5236236394

   I will split this design into independently reviewable PRs:
   
   1. **Capability contract**: add an instance-scoped ACL capability 
endpoint/model. It reports the selected instance, state source (`STUDIO_LOCAL` 
initially), and read/write availability without claiming cluster enforcement.
   2. **Apache ACL 1.0 read path**: add a provider implementation that resolves 
the selected Apache instance through `RuntimeAdminClientResolver` and exposes 
only provider-backed rule/user reads that the admin protocol can support.
   3. **Guarded Apache mutations**: add explicit provider-backed mutations, 
credential resolution, audit correlation, and a no-fallback rule so failed 
remote writes never become local writes.
   4. **ACL 2.0 and cloud providers**: follow-up integration after the Proxy 
Admin/API contract is available; capability negotiation keeps these unsupported 
states explicit.
   
   #1403 already covers the interim UI warning and local audit trail, so the 
first PR will start with the backend capability contract rather than duplicate 
that behavior.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to