Loyal-Young opened a new pull request, #6717: URL: https://github.com/apache/rocketmq-dashboard/pull/6717
## What is the purpose of the change Fixes #6716. An ACL entry with wildcard resource but an unknown permission was counted as broad authorization. The same entry was also reported as malformed, so the panel could raise a false wildcard risk and inflate the wildcard-account count. ## Brief changelog - Count wildcard entries only when their parsed permission grants `PUB`, `SUB`, or `ALL`. - Keep the existing malformed-entry finding for `UNKNOWN` permissions. - Cover `*=INVALID` and a bare `*` alongside the existing recognized-wildcard cases. ## Verification - The new regression failed before the fix (`wildcardPermissionAccountCount` was 1 instead of 0). - ACL risk diagnostic suite: 8/8 passed after the fix. - TypeScript `--noEmit`, changed-file ESLint, and `git diff --check` passed. ## AI assistance AI assistance helped trace the diagnostic classification and draft the regression. I reviewed the narrow permission-rank change and ran the checks above. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
