RockteMQ-AI commented on issue #4273: URL: https://github.com/apache/rocketmq-dashboard/issues/4273#issuecomment-5652596100
**Issue Evaluation** Category: | Status: **Confirmed** The reported issue has been verified against the current codebase. **Root Cause:** MyBatis-Plus uses by default, which omits null entity fields from the clause. When maps a blank submission to , the call is silently dropped by , so the column retains its previous value while the API returns the null value from the in-memory entity. **Impact:** Security-relevant — an admin credential reference becomes write-once. Operators cannot clear it through the UI despite the API appearing to accept the change. The UI displays stale data until the next manual reload. **Severity:** High — silent data inconsistency in a security-sensitive configuration field. **Suggested Fix:** The repository layer should use an explicit or to set the column to when the credential ref is blank, bypassing the field strategy. This is consistent with the prior fixes for ACL user/rule columns (#3342) and . An automated fix proposal will be generated. Reply to proceed with PR generation. --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
