Acl table problem

[aycakahya]

mqtt_acl table
allow: 1, ipaddr: null, username: master, clientid: null, access: 1, topic: test
allow: 0, ipaddr: null, username: $all, clientid: null, access: 2, topic: test

auth.pgsql.acl_query
select allow, ipaddr, username, clientid, access, topic from mqtt_acl where ipaddr = '%a' or username = '%u' or username = '$all' or clientid = '%c'

I created the table and the query as above. But I want user 'master' to be able to read the test topic but not write it. I looked at the documents on the internet but could not find any solution.
Where am I making a mistake?

[jwtea]

Also running into this problem. Is there no way to enable the ACL rules to function as a whitelist for topics?

[jwtea]

Something i missed is it seems you must reload the service after changing ACL rules in this table.

The following configuration allows for whitelisting by username when settings allow.anonymous to false in the emqx broker config.

 allow | ipaddr | username | clientid | access |     topic
     0 |        | $all     |          |      3 | #
     1 |        | admin    |          |      3 | /v1.0/device/#
     1 |        | client   |          |      3 | /v1.0/device/1
     1 |        | client2  |          |      3 | /v1.0/device/2