Aias00 opened a new issue, #874: URL: https://github.com/apache/rocketmq-dashboard/issues/874
### Problem `AclController#createUser` accepts `AclUserVO` without request validation. A blank or missing username can pass the controller boundary and reach `AclService#createUser`. The same controller already validates delete requests with `AclDeleteRequestDTO`, so ACL user creation should use the same boundary-validation pattern. ### Expected behavior - Reject ACL user create requests with a missing or blank username. - Do not call `AclService#createUser` for invalid requests. - Keep `AclUserVO` usable as a response model for masked credentials and generated keys. - Add MockMvc regression coverage. ### Scope RocketMQ Studio / Track 1 / AUTH-01 ACL user management. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
