Aias00 commented on issue #1312: URL: https://github.com/apache/rocketmq-dashboard/issues/1312#issuecomment-5236283188
Correction after checking the RocketMQ 5.5 admin API: - `MQAdminExt.listAcl/getAcl` operates on `AclInfo` and is the usable remote **ACL 2.0** read surface. ACL 1.0 `PlainAccessConfig` does not provide an equivalent cluster-wide list API through `MQAdminExt`. - `RuntimeAdminClientResolver` currently invokes `MqAdminExtFactory` with a null RPC hook. It therefore cannot safely serve ACL-enabled clusters until instance-scoped admin credentials and hook injection exist. Updated dependency order: 1. #1426 capability contract. 2. Add an instance-scoped admin credential reference and authenticated `RuntimeAdminClientResolver` execution path. 3. Add Apache ACL 2.0 read provider using `listAcl/getAcl`, with explicit per-broker aggregation semantics. 4. Add guarded ACL 2.0 mutations. 5. Treat ACL 1.0 as a separate provider design: its policy source must be configured/file-backed rather than inferred from the ACL 2.0 admin API. This avoids claiming ACL 1.0 support through an API that does not expose it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
