You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@rocketmq.apache.org by GitBox <gi...@apache.org> on 2022/06/07 13:19:11 UTC

[GitHub] [rocketmq] Cczzzz commented on issue #4426: ACL bug，Why does retrying a message require the send permission of the original topic

Cczzzz commented on issue #4426:
URL: https://github.com/apache/rocketmq/issues/4426#issuecomment-1148663225

   > 在我看来，这似乎是一种权衡。如果不是这样，任何对一个主题具有订阅权限但没有发布权限的客户端也可以通过 SEND_MSG_BACK 请求向该主题发布消息。但是检查订阅权限可能更合理。
   
   But I really don't need to send a message to the origin topic.And he also verifies the sub permission of the group，
   The broker restricts this message to only %RETRY%+group .
        String newTopic = MixAll.getRetryTopic(requestHeader.getGroup());
   seems safe.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@rocketmq.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org