coder999o opened a new pull request, #2547: URL: https://github.com/apache/rocketmq-dashboard/pull/2547
## What is the purpose of the change Prevent Tencent Cloud role-backed ACL operations from accepting rule shapes that Tencent roles cannot represent. Tencent roles only support cluster-wide allow rules on `*`, so the backend now rejects unsupported resource-scoped or deny rules instead of silently mapping them to role permissions. The ACL page also uses role names as stable identifiers for Tencent roles, where no local numeric ACL row exists. ## Brief changelog - Validate Tencent ACL rule creation/update against the cluster-wide role contract and map `ALL` to read/write permissions. - Allow ACL update/delete/credential APIs to carry cloud role-name identifiers while preserving numeric IDs for local ACL rows. - Constrain the Tencent ACL UI to role-backed fields and cover role-name rule/user flows with focused tests. ## Verifying this change - `mvn -q -Dtest=AclServiceTest,AclControllerTest,TencentAclServiceTest test` - `mvn -q checkstyle:check -DskipTests` - `npm test -- --run src/pages/instance/__tests__/AclPage.test.tsx src/api/acl.test.ts src/services/aclService.test.ts` - `npx eslint src/pages/instance/acl.tsx src/pages/instance/__tests__/AclPage.test.tsx src/api/acl.ts src/api/acl.test.ts src/services/aclService.ts --max-warnings=0` - `npm run build` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
