RockteMQ-AI commented on issue #1634: URL: https://github.com/apache/rocketmq-dashboard/issues/1634#issuecomment-5250091355
**Issue Evaluation** Category: `type/bug` | Status: **Confirmed** The plain-access IP whitelist UI does not support clearing the whitelist (setting it to empty). This is a security-relevant gap — administrators cannot revoke all IP restrictions through the Studio interface once they are set. **Severity:** Medium — security operations gap; prevents proper access control management. **Suggested Fix:** Allow empty string/array submission for the whitelist field, and ensure the backend correctly handles the empty case (clearing the whitelist rather than ignoring the update). --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
