ShannonDing commented on issue #4688: URL: https://github.com/apache/rocketmq/issues/4688#issuecomment-1204989314
> > A Question: is a pair of ak/sk allowed to access topics from two or more name space? do we need to consider this scenario? > > @ShannonDing I don't think a pair of ak/sk from one namespace should be allowed to access topics from other namespace. 对于不同用户来说，特别是云上用户，授权访问资源是很常见的场景。 我认为， 1.要么规定一个用户可以访问哪些资源，2.要么规定某个资源可以被哪些用户访问。我们现在的ACL的配置其实还是第一种情况，增加了namespace，只是对资源做了分组，而不是对用户本身做了变化，因此不应该打破原来的这个逻辑。 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
