RockteMQ-AI commented on issue #2256: URL: https://github.com/apache/rocketmq-dashboard/issues/2256#issuecomment-5303064535
**Issue Evaluation** Category: `bug` | Status: **Confirmed** **Branch:** `rocketmq-studio` The null-safety issue in `ApacheAclReadService` has been verified. At line ~49, `admin.listAcl(address, subject, resource).stream()` is called without a null check on the return value. If the broker returns null or a response containing null nested rows, the entire per-broker catch block discards all valid policies from that broker. **Root Cause:** No defensive null handling on the `listAcl` return value or its nested objects (policies, groups, entries, actions, source IPs). **Impact:** A single malformed row from one broker causes all valid ACL policies from that broker to be lost, and the broker is incorrectly reported as failed. **Severity:** Medium — affects ACL visibility in multi-broker clusters when any broker returns partial data. **Verified at:** `server/src/main/java/org/apache/rocketmq/studio/instance/acl/ApacheAclReadService.java:40-55` An automated fix proposal can be generated. Reply `/approve` to proceed with PR generation. --- *Automated evaluation by RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
