RockteMQ-AI commented on issue #2351: URL: https://github.com/apache/rocketmq-dashboard/issues/2351#issuecomment-5330161700
**Issue Evaluation** Category: `bug` | Status: **Confirmed** Valid bug. Two related auth state synchronization issues: (1) disabling login protection leaves stale Reader role in browser state; (2) changing password revokes server session but browser stays visually authenticated until a later 401. Both need client auth store refresh/clear on policy and password changes. **Severity:** medium — security-adjacent UX issue, can confuse users about their actual permissions. **Impact:** Auth state consistency after admin operations. --- *Automated evaluation by @RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
