89799969 opened a new issue, #5064:
URL: https://github.com/apache/rocketmq-dashboard/issues/5064

   ## Problem
   
   The create-user dialog on the Studio user management page 
(`web/src/pages/studio/UserManagement.tsx`) keeps its form mounted across 
open/close cycles. The cancel path only closes the dialog: there is no 
`resetFields()` and no `destroyOnHidden`. The form is only reset after a 
successful create.
   
   After typing a password and enabling admin and then cancelling, the next 
open still shows those values — a residual-secret / residual-privilege risk if 
the operator confirms by mistake.
   
   This is the same defect previously tracked in #4252 (auto-closed by the 
7-day stale bot while the fix PR was waiting for review).
   
   ## Expected
   
   Cancelling or reopening the create-user dialog starts from a clean form 
(empty username/password, admin off).
   
   ## Actual
   
   Cancelled dialog retains username, password, and admin switch for the next 
open.
   
   ## Proposed fix
   
   - `openCreateUserModal`: `createForm.resetFields()` before opening
   - Modal `onCancel`: close and `createForm.resetFields()`
   - Regression test: open -> type -> cancel -> reopen -> assert fields are 
empty
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to