acl.conf的配置被覆盖了

[GordonHuangYong]

插件中, onClientCheckAcl覆盖了acl.conf的配置.

而官方文档中描述

内置 ACL 是优先级最低规则表，在所有的 ACL 检查完成后，如果仍然未命中则检查默认的 ACL 规则。

期望此插件不要覆盖acl.conf. 可以做成像认证那样, 做成链式检查.

acl.conf

{allow, {user, "dashboard"}, subscribe, ["$SYS/#"]}.

{allow, {ipaddr, "127.0.0.1"}, pubsub, ["$SYS/#", "#"]}.

{deny, all, subscribe, ["$SYS/#", {eq, "#"}, {eq, "/test"}]}.

{allow, all}.

java

@Override
    public boolean onClientCheckAcl(ClientInfo clientInfo, PubSub pubsub, Topic topic, boolean result) {
        System.err.printf("[Java] onClientCheckAcl: clientinfo: %s, pubsub: %s, topic: %s, result: %s\n", clientInfo, pubsub, topic, result);
       //false, 发现所有主题都不能订阅了
       //true, 可以订阅任意主题.包括"/test"
        return false;
    }

[HJianBo]

This is because you returned false, so the ACL check failed.

Returning a value like ignore is not currently supported on 4.2.x implementations. However, it is supported in the 4.3 implementations. You can try it