RockteMQ-AI commented on issue #2202:
URL: 
https://github.com/apache/rocketmq-dashboard/issues/2202#issuecomment-5294855967

   **Issue Evaluation**
   
   Category: `bug` | Status: **Confirmed**
   
   This is a valid bug. Time-range message queries create a short-lived 
`DefaultMQPullConsumer` without the `adminCredentialRef` ACL hook, while 
`MQAdminExt` calls correctly go through `RuntimeAdminClientResolver`.
   
   **Root Cause:** The PullConsumer for time-range queries is created directly 
without credential-hook resolution, creating an inconsistency with other admin 
paths.
   **Impact:** Time-range message queries fail on ACL 1.0-enabled clusters, 
breaking a core message inspection capability.
   **Severity:** medium-high — message inspection is a frequently-used 
operational feature.
   
   This is the same class of issue as #2204 and #2205. All three should be 
addressed together as they share the same root cause pattern.
   
   ---
   *Automated evaluation by github-manager*


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to