Hi Bernd There are a few changes coming about the default ACL.
Indeed the ACL defaults (for commands or JMX MBeans), but we could be more explicit. Regards JB On Wed, Oct 28, 2026 at 7:39 PM Bernd Eckenfels <[email protected]> wrote: > > > Hello, > > I think I cn answer myself, the ACL files currently do not assign all > operations to at least the viewer role, so before an admin fallback can be > added, this would be needed. Is that something which I can contribute? There > should be really no command which is not classified.. > > Gruß > Bernd > > Bernd Eckenfels schrieb am 28.10.2026 15:57 (GMT +01:00): > > > > > Hello, > > > > I was analysing the 4.4.12 improvements in the area of Command ACLa and was > > wondering, why don’t all those config files contain “* = admin” by > > default, isn’t that a good fallback against forgotten critical commands, or > > would that change not be effective? > > > > Related, there is a confit to require a specific role in all cases, but > > that’s I guess most of the time not particular helpful since even low > > priveledged users would need that role. Rather a setting for commands which > > have no ACL file would be more interesting, to make the *=admin in for all > > the > > default? > > > > > > > > gruss > > Bernd > > > > > > > > > >
