Loyal-Young opened a new issue, #6716: URL: https://github.com/apache/rocketmq-dashboard/issues/6716
## Problem The ACL risk panel classifies a wildcard resource with an unrecognized permission as a broad authorization. `wildcardEntries` accepts every permission except `DENY`, including `UNKNOWN`. A malformed entry such as `*=INVALID` therefore produces a wildcard-access warning and increments `wildcardPermissionAccountCount`, even though the analyzer also marks the permission invalid and ranks `UNKNOWN` as no allow. This can inflate the risk score and direct operators toward a nonexistent grant instead of the actual malformed configuration. ## Reproduction Analyze an otherwise least-privilege account with `topicPerms: ['*=INVALID']` or a bare `*` entry. Observe both `INVALID_PERMISSION_ENTRY` and `WILDCARD_TOPIC_PERMISSION`, plus a wildcard-account count of one. ## Proposed fix Count wildcard entries only when the parsed permission grants `PUB`, `SUB`, or `ALL`; continue to report malformed entries separately. Add focused tests for unknown and recognized wildcard permissions. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
