RockteMQ-AI commented on issue #10496: URL: https://github.com/apache/rocketmq/issues/10496#issuecomment-4711390962
**Issue Evaluation** Category: `type/bug` | Status: **Confirmed** The `plain_acl.yml` file is indeed missing from the official 5.x binary release distribution. In RocketMQ 5.x, the ACL system requires this file to define users, roles, and permissions. Without it, users who download the binary release and enable ACL will encounter authentication failures with no clear guidance. **Root Cause:** The release assembly scripts (`distribution/conf/` packaging) likely do not include `plain_acl.yml` in the distribution archive, even though the file exists in the source tree under `distribution/conf/` or `broker/conf/`. **Impact:** Users deploying from binary releases cannot use ACL out-of-the-box. This is a **high-severity** distribution bug — it silently breaks a documented security feature. **Severity:** High — security feature broken in official release. Verifying against the codebase to confirm the fix location... --- *Automated evaluation by RockteMQ-AI* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
