You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by "zergduan (via GitHub)" <gi...@apache.org> on 2025/04/21 06:16:16 UTC
[I] [Bug] ACL 2.0 默认权限缺陷 [rocketmq]
zergduan opened a new issue, #9349:
URL: https://github.com/apache/rocketmq/issues/9349
### Before Creating the Bug Report
- [x] I found a bug, not just asking a question, which should be created in [GitHub Discussions](https://github.com/apache/rocketmq/discussions).
- [x] I have searched the [GitHub Issues](https://github.com/apache/rocketmq/issues) and [GitHub Discussions](https://github.com/apache/rocketmq/discussions) of this repository and believe that this is not a duplicate.
- [x] I have confirmed that this bug belongs to the current repository, not other repositories of RocketMQ.
### Runtime platform environment
Oracle Linux 9
### RocketMQ version
release 5.3.2
### JDK Version
JDK 21
### Describe the Bug
ACL 2.0 中用户默认权限缺少MessageTrace默认Topic RMQ_SYS_TRACE_TOPIC的 PUB权限。在 ACL 1.0 中 从4.9.4开始新创建的用户默认拥有RMQ_SYS_TRACE_TOPIC的 PUB权限，以便用于记录消息追踪信息；但是目前ACL 2.0中新建用户默认没有此权限，需要手动创建相关ACL才能使用消息追踪功能；
即需要执行下面命令，才可以使用默认Topic记录消息追踪信息：
sh mqadmin createAcl -n 'xxx:xxx' -c XXX \
--subject User:XXX --resources Topic:RMQ_SYS_TRACE_TOPIC \
--actions PUB --decision Allow;\
建议对新建用户默认授权相关系统Topic权限。
### Steps to Reproduce
N/A
### What Did You Expect to See?
新建用户应默认拥有SYTEM Topic的授权，不应需要手动创建System Topic相关的ACL授权
### What Did You See Instead?
A
### Additional Context
_No response_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Bug] ACL 2.0 默认权限缺陷 [rocketmq]
Posted by "dingshuangxi888 (via GitHub)" <gi...@apache.org>.
dingshuangxi888 commented on issue #9349:
URL: https://github.com/apache/rocketmq/issues/9349#issuecomment-2818083601
默认权限是比较危险的行为，建议还是单独授权比较合适。
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Bug] ACL 2.0 默认权限缺陷 [rocketmq]
Posted by "zergduan (via GitHub)" <gi...@apache.org>.
zergduan commented on issue #9349:
URL: https://github.com/apache/rocketmq/issues/9349#issuecomment-2819905471
多谢，确认
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] [Bug] ACL 2.0 默认权限缺陷 [rocketmq]
Posted by "zergduan (via GitHub)" <gi...@apache.org>.
zergduan closed issue #9349: [Bug] ACL 2.0 默认权限缺陷
URL: https://github.com/apache/rocketmq/issues/9349
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@rocketmq.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org