Aias00 opened a new pull request, #6952: URL: https://github.com/apache/rocketmq-dashboard/pull/6952
### Which Issue(s) This PR Fixes - Addresses #5669 ### Brief Description A `0600` config in a pre-existing `0755` directory loads successfully but every save fails because the write path requires an exact `0700` directory. This draft proposes accepting non-group/other-writable parents for both reading and writing, retaining owner-only config files and `0700` creation for new directories. It rejects writable-by-others parents on both paths and never chmods an operator-selected directory. The Unix security/usability choice is submitted for maintainer agreement in #5669. Windows keeps its inherited ACL behavior. This checks the immediate parent and existing POSIX mode bits; it does not add an ancestor traversal, ACL or symlink-hardening subsystem. ### How Did You Test This Change? - Before: real-directory regressions fail for 0750/0755 saves and 0770/0777 reads. - After: `go test -race -count=1 ./...`, `go vet ./...`, `go build ./...` and `make catalog-verify` pass. - `gofmt` and `git diff --check` pass. - Tests assert directory modes stay unchanged and saved file mode remains 0600. ### Checklist - [x] One coherent change, no new dependencies - [x] Conventional Commit and DCO sign-off - [x] Regression tests and Unix/Windows boundaries retained - [x] ASF header on new source - [x] Updated permission policy documentation - [ ] Maintainer agreement on the directory policy -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
