youngkermit8-coder opened a new pull request, #1643: URL: https://github.com/apache/rocketmq-dashboard/pull/1643
## Summary - record successful plain-access account upserts in the Studio operation audit log - identify the affected access key without logging secrets or concrete whitelist values - preserve the existing best-effort audit policy so an audit-store failure does not roll back a completed ACL write ## Root cause `createAndUpdatePlainAccessConfig` delegated directly to the repository and returned. Every other ACL write path records an operation audit, so plain-access changes were the only security-sensitive ACL mutations without an operator or timestamp trail. The new `UPSERT_PLAIN_ACCESS_CONFIG` event uses resource type `ACL_USER`, targets the access key, and records only the admin flag and whether a whitelist is configured. ## Validation - both regression tests failed on the unmodified implementation because no audit call occurred - ACL-related tests: 62/62 passed - Checkstyle: 0 violations - `mvn package -DskipTests`: passed - full backend suite: 904/906 passed; the two `ToolGatewayServiceTest` JSON Schema failures reproduce unchanged on clean base `ffaff10` Closes #1640 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
