rocketmq icon indicating copy to clipboard operation
rocketmq copied to clipboard

[Enhancement] Add acl request code to the permission verification for the admin role

Open chenxubiao opened this issue 1 year ago • 2 comments

Before Creating the Enhancement Request

  • [X] I have confirmed that this should be classified as an enhancement rather than a bug/feature.

Summary

Add the request code UPDATE_GLOBAL_WHITE_ADDRS_CONFIG = 53 to the permission verification for the admin role

Motivation

Add the request code UPDATE_GLOBAL_WHITE_ADDRS_CONFIG = 53 to the permission verification for the admin role

Describe the Solution You'd Like

Add the request code UPDATE_GLOBAL_WHITE_ADDRS_CONFIG = 53 to the permission verification for the admin role

Describe Alternatives You've Considered

No

Additional Context

No response

chenxubiao avatar Aug 12 '24 11:08 chenxubiao

What's the purpose of this feature? Whether it is the admin role should be determined by other means.

humkum avatar Aug 13 '24 06:08 humkum

If the ACL function is enabled and the client is assigned common user role, the client can modify the global whitelist configuration through this api to obtain super rights. Therefore, I believe that the modification permission of this api needs to be verified for the admin role.

related issue 7929

chenxubiao avatar Aug 13 '24 07:08 chenxubiao

This issue is stale because it has been open for 365 days with no activity. It will be closed in 3 days if no further activity occurs.

github-actions[bot] avatar Aug 14 '25 00:08 github-actions[bot]

This issue was closed because it has been inactive for 3 days since being marked as stale.

github-actions[bot] avatar Aug 17 '25 00:08 github-actions[bot]