[GitHub] [rocketmq] coder-zzzz opened a new issue #2145: CONSUMER_SEND_MSG_BACK request should not valid PUB perm of originTopic

Wed, 08 Jul 2020 03:06:54 -0700 


coder-zzzz opened a new issue #2145:
URL: https://github.com/apache/rocketmq/issues/2145


   ** [BUG REPORT]
   ```
   PlainAccessValidator#parse
   case RequestCode.CONSUMER_SEND_MSG_BACK:
                       
accessResource.addResourceAndPerm(request.getExtFields().get("originTopic"), 
Permission.PUB);
                       
accessResource.addResourceAndPerm(getRetryTopic(request.getExtFields().get("group")),
 Permission.SUB);
                       break;
   ```
   Why send msg back need to check the pub permission of originTopic.
   When broker receive  this type of request , it will put the msg into 
%RETRY%GroupName，then consumer subscribe this topic to consume msg when 
cosnumer started.
   
   So, IMO, It should not check originTopic' pub permission　And the pub and sub 
permission of group's retry topic should be default authorize to consumer 
whitout other config


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to