Aias00 opened a new issue, #2202: URL: https://github.com/apache/rocketmq-dashboard/issues/2202
## Background Apache time-range message queries create a short-lived `DefaultMQPullConsumer` for the selected instance endpoint. Unlike `MQAdminExt` calls resolved through `RuntimeAdminClientResolver`, this consumer is currently created without the instance `adminCredentialRef` ACL hook. On an ACL 1.0-enabled Apache RocketMQ cluster, message ID/key paths may authenticate while the topic time-range scan fails because the PullConsumer is anonymous. ## Expected behavior When an Apache instance references admin credentials, all runtime message-query paths, including time-range topic scans, use the same ACL credentials. Instances without configured credentials keep the existing unauthenticated behavior. ## Proposed fix Expose a narrow credential-hook resolution path from the runtime client resolver (or an equivalent shared factory), inject it when creating the short-lived PullConsumer, and add regression tests for both configured and absent credentials. ## Scope Track 1 / Control Plane runtime interaction and AUTH-01 compatibility. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
