RockteMQ-AI commented on issue #4780:
URL:
https://github.com/apache/rocketmq-dashboard/issues/4780#issuecomment-5764513574
**Impact:**
- Editing role A's rule while selecting role B in the dropdown could
silently modify role B's rule or create an inconsistent state
- Original rule ID is retained but no longer matches the intended target
- Data integrity risk for multi-role ACL configurations
**Suggested fix direction:**
1. When the principal selector changes during edit, either:
- Clear the `editingRule.id` to force a create-new-rule path, OR
- Lock the principal selector during edit (disable it until the edit is
cancelled), OR
- Fetch the target role's existing rules and validate the ID still exists
before submitting 2. Add a confirmation dialog when the principal changes
during an active edit 3. Backend validation: Tencent API should reject updates
where the rule ID doesn't belong to the specified principal
**Priority:** MEDIUM-HIGH — data integrity issue affecting ACL management
correctness.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
