Aias00 commented on issue #1312: URL: https://github.com/apache/rocketmq-dashboard/issues/1312#issuecomment-5236236394
I will split this design into independently reviewable PRs: 1. **Capability contract**: add an instance-scoped ACL capability endpoint/model. It reports the selected instance, state source (`STUDIO_LOCAL` initially), and read/write availability without claiming cluster enforcement. 2. **Apache ACL 1.0 read path**: add a provider implementation that resolves the selected Apache instance through `RuntimeAdminClientResolver` and exposes only provider-backed rule/user reads that the admin protocol can support. 3. **Guarded Apache mutations**: add explicit provider-backed mutations, credential resolution, audit correlation, and a no-fallback rule so failed remote writes never become local writes. 4. **ACL 2.0 and cloud providers**: follow-up integration after the Proxy Admin/API contract is available; capability negotiation keeps these unsupported states explicit. #1403 already covers the interim UI warning and local audit trail, so the first PR will start with the backend capability contract rather than duplicate that behavior. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
