yuluo-yx opened a new issue, #3136: URL: https://github.com/apache/rocketmq-dashboard/issues/3136
## Problem Operators maintain equivalent ACL users and rules across production, staging, and disaster-recovery RocketMQ instances. Studio currently exposes one instance at a time, so policy reviews require manual exports and carry a risk of overlooking a missing or divergent grant. ## Proposed behavior Add a read-only ACL comparison workflow that: - loads complete paginated user and rule inventories from two instances; - classifies policies as matching, drifted, source-only, or target-only; - compares user administration, cluster association, read, and write permissions; - compares rule actions, decision, and ACL version under a stable principal/resource identity; - preserves duplicate logical rules instead of collapsing them; - supports kind/status/search filters and filtered CSV export. ## Sensitive-data boundary The comparison must never call credential reveal endpoints. Secret keys, masked secrets, access-key display variants, database ids, and creation timestamps are excluded from comparisons and exports. ## Acceptance criteria 1. Inventory walks are bounded and include every page. 2. Source and target can be swapped without stale results. 3. User and rule drift has field-level evidence. 4. CSV export follows active filters and contains no secret material. 5. Chinese and English UI text and focused regression tests are included. ## Scope This feature is observational and does not create, update, delete, or synchronize ACL policies. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
