The GitHub Actions job "CI" on 
rocketmq-dashboard.git/fix/acl-unrestricted-scoping has failed.
Run started by GitHub user 123123213weqw (triggered by 123123213weqw).

Head commit for run:
baabd95a7f480f71f228372741e0071dade60e19 / Yue Wang <[email protected]>
fix(acl): grade an empty account whitelist as unrestricted in risk diagnostics

An account-level whiteRemoteAddress that is omitted, null, empty or
whitespace-only imposes no source restriction (AclUserVO documents the
empty value and AclService.splitWhiteList returns an empty list), but
accountWhitelistClass passed the empty list to the generic classifier,
whose default is scoped. An unrestricted administrator could therefore
score healthy/100 with broadWhitelistCount 0 and no
BROAD_ACCOUNT_WHITELIST or ADMIN_WITH_BROAD_ACCESS findings.

Grade the account-level empty value as open in accountWhitelistClass,
keeping the generic classifier and the empty global whitelist semantics
(no globally trusted addresses) untouched and reusing the existing
findings and <empty> evidence text.

Report URL: 
https://github.com/apache/rocketmq-dashboard/actions/runs/39748174026

With regards,
GitHub Actions via GitBox

Reply via email to